WO2020186775A1

WO2020186775A1 - Service data providing method, apparatus and device, and computer-readable storage medium

Info

Publication number: WO2020186775A1
Application number: PCT/CN2019/116481
Authority: WO
Inventors: 花秀明; 卢小龙; 郑锋
Original assignee: 平安科技（深圳）有限公司
Priority date: 2019-03-15
Filing date: 2019-11-08
Publication date: 2020-09-24
Also published as: CN110061967A; CN110061967B

Abstract

The present application falls within the technical field of security protection, and provides a service data providing method, apparatus and device, and a computer-readable storage medium. The method comprises: when a front end of a service system receives a uniform resource locator (URL) request, determining whether the URL request is triggered by an authenticated user; if so, extracting a plaintext query parameter from the URL request, and carrying out an encryption operation on the plaintext query parameter to obtain a ciphertext query parameter; replacing the plaintext query parameter in the URL request with the ciphertext query parameter to obtain an encrypted URL request, and sending the encrypted URL request to a service system server; and receiving corresponding service data returned by the service system server based on the encrypted URL request, and outputting the service data at the front end of the service system. The present application guarantees the security of service data.

Description

Business data providing method, device, equipment and computer readable storage medium To

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office, the application number is 201910198502.2, and the invention title is "business data providing methods, devices, equipment and computer-readable storage media" on March 15, 2019, and its entire contents Incorporated in the application by reference.

Technical field

This application relates to the technical field of security protection, and in particular to a method, device, equipment and computer-readable storage medium for providing business data.

Background technique

The business system is an online system for processing business, in which a large amount of sensitive business data is circulated, and the security of the business system is very important. However, some illegal users will fake URLs (Uniform/Universal Resource Locator (Uniform Resource Locator) crawls business data from business systems, which leads to business data leakage.

Summary of the invention

The main purpose of this application is to provide a method, device, device, and computer-readable storage medium for providing business data, aiming to ensure the security of business data.

In order to achieve the above objective, this application provides a method for providing service data. The method for providing service data is applied to a front-end controller of a service system. The method for providing service data includes the following steps:

When receiving a uniform resource locator URL request at the front end of the business system, determine whether the URL request is triggered by an authenticated user;

If yes, extract the plaintext query parameters in the URL request, and perform an encryption operation on the plaintext query parameters to obtain the ciphertext query parameters;

Replacing the plaintext query parameters in the URL request with the ciphertext query parameters to obtain an encrypted URL request, and send the encrypted URL request to the business system server;

Receiving the corresponding service data returned by the service system server based on the encrypted URL request, and outputting the service data at the front end of the service system;

Wherein, the step of performing an encryption operation on the plaintext query parameter to obtain the ciphertext query parameter includes:

Converting the plaintext query parameter into an array of preset length;

Encrypt each element in the array by a preset symmetric encryption algorithm to obtain an encrypted array;

Encode the encrypted array to obtain an encoded array;

Traverse each element in the coded array, determine the easily mixed elements in the coded array, and replace the easily mixed elements in the coded array with corresponding preset characters according to the preset mapping relationship to obtain the ciphertext Query parameters.

In addition, in order to achieve the above objective, this application also provides a method for providing service data, which is applied to a service system server, and the method for providing service data includes the following steps:

When receiving the encrypted URL request sent by the front-end controller of the business system, decrypt and verify the encrypted URL request;

When the decryption verification is passed, obtain the corresponding business data and return it to the front-end controller of the business system, so that the front-end controller of the business system outputs the business data at the front-end of the business system;

Wherein, the step of decrypting and verifying the encrypted URL request includes:

Extracting ciphertext query parameters from the encrypted URL request;

Performing the inverse operation of the encryption operation on the ciphertext query parameter;

If the ciphertext query parameter is restored to the plaintext query parameter through the inverse operation, it is confirmed that the decryption verification is passed.

In addition, in order to achieve the above-mentioned purpose, this application also provides a service data providing device, and the service data providing device includes:

The judgment module is used for judging whether the URL request is triggered by an authenticated user when the uniform resource locator URL request is received at the front end of the business system;

The encryption module is used to extract the plaintext query parameters in the URL request, and perform an encryption operation on the plaintext query parameters to obtain the ciphertext query parameters;

The replacement module is configured to replace the plaintext query parameters in the URL request with the ciphertext query parameters to obtain an encrypted URL request, and send the encrypted URL request to the business system server;

An output module, configured to receive the corresponding business data returned by the business system server based on the encrypted URL request, and output the business data at the front end of the business system;

Wherein, the encryption module includes:

A conversion unit for converting the plaintext query parameter into an array of preset length;

An encryption unit, configured to encrypt each element in the array by using a preset symmetric encryption algorithm to obtain an encrypted array;

An encoding unit for encoding the encrypted array to obtain an encoding array;

The replacement unit is used to traverse each element in the coded array, determine the easily mixed elements in the coded array, and replace the easily mixed elements in the coded array with the corresponding preset according to a preset mapping relationship Character to get ciphertext query parameters.

The decryption module is used to decrypt and verify the encrypted URL request when the encrypted URL request sent by the front-end controller of the business system is received;

The return module is used to obtain corresponding business data and return it to the front-end controller of the business system when the decryption verification is passed, so that the front-end controller of the business system outputs the business data at the front-end of the business system;

Wherein, the decryption module includes:

An extraction unit for extracting ciphertext query parameters from the encrypted URL request;

An inverse operation unit, configured to perform the inverse operation of the encryption operation on the ciphertext query parameter;

The confirming unit is configured to confirm that the decryption verification is passed if the ciphertext query parameter is restored to the plaintext query parameter through the inverse operation.

In addition, in order to achieve the above objective, the present application also provides a service data providing device, the service data providing device including a processor, a memory, and computer-readable instructions stored on the memory and executable by the processor , When the computer-readable instructions are executed by the processor, the following steps are implemented:

Receiving the corresponding service data returned by the service system server based on the encrypted URL request, and outputting the service data at the front end of the service system.

When the decryption verification is passed, the corresponding service data is obtained and returned to the front-end controller of the service system, so that the front-end controller of the service system outputs the service data at the front-end of the service system.

In addition, in order to achieve the above object, the present application also provides a computer-readable storage medium having computer-readable instructions stored on the computer-readable storage medium, and when the computer-readable instructions are executed by a processor, the following steps are implemented :

In the business data provision method proposed in this application, the front-end controller of the business system will first determine whether the URL request received by the front-end of the business system is triggered by an authenticated user, thus achieving the first level of security protection. If it is confirmed that the URL request is triggered by an authenticated user, Then extract the plain text query parameters in the URL request, perform an encryption operation on the plain text query parameters to obtain the cipher text query parameters, and then replace the plain text query parameters in the URL request with the cipher text query parameters to obtain the encrypted URL request. , The encrypted URL request is sent to the business system server, so that the business system server returns the corresponding business data based on the encrypted URL request, realizing the second level of security protection, so that it can be the authentication of the business system access and use rights Users provide business data, and malicious data crawling is prevented, ensuring the security of business data.

Description of the drawings

FIG. 1 is a schematic diagram of the hardware structure of the service data providing device involved in the solution of the embodiment of the application;

FIG. 2 is a schematic flowchart of a first embodiment of a method for providing service data of an application;

FIG. 3 is a schematic flowchart of a second embodiment of a method for providing service data of an application;

Fig. 4 is a schematic diagram of functional modules of the first embodiment of the service data providing apparatus of this application.

The realization, functional characteristics, and advantages of the purpose of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings.

detailed description

It should be understood that the specific embodiments described here are only used to explain the application, and are not used to limit the application.

The service data providing method involved in the embodiments of this application is mainly applied to a service data providing device, and the service data providing device may be a personal computer (personal computer). computer, PC), server and other equipment with data processing functions.

Referring to FIG. 1, FIG. 1 is a schematic diagram of the hardware structure of the service data providing device involved in the solution of the embodiment of the application. In the embodiment of the present application, the service data providing device may include a processor 1001 (for example, the central processing unit Central Processing Unit, CPU), communication bus 1002, user interface 1003, network interface 1004, memory 1005. Among them, the communication bus 1002 is used to realize the connection and communication between these components; the user interface 1003 may include a display (Display), an input unit such as a keyboard (Keyboard); the network interface 1004 may optionally include a standard wired interface, a wireless interface (Such as wireless fidelity WIreless-FIdelity, WI-FI interface); the memory 1005 can be a high-speed random access memory (random access memory, RAM), or stable memory (non-volatile memory), such as a disk memory. The memory 1005 may optionally be a storage device independent of the aforementioned processor 1001. Those skilled in the art can understand that the hardware structure shown in FIG. 1 does not constitute a limitation to the present application, and may include more or less components than those shown in the figure, or combine certain components, or different component arrangements.

Continuing to refer to FIG. 1, the memory 1005 as a computer storage medium in FIG. 1 may include an operating system, a network communication module, and computer-readable instructions. In FIG. 1, a processor 1001 can call computer-readable instructions stored in a memory 1005, and execute the service data providing method provided by each embodiment of the present application.

The embodiment of the application provides a method for providing service data.

Referring to Fig. 2, Fig. 2 is a schematic flowchart of a first embodiment of a method for providing service data according to this application.

In this embodiment, the service data providing method is applied to a front-end controller of a service system, and the service data providing method includes the following steps:

Step S10: When a uniform resource locator URL request is received at the front end of the business system, it is determined whether the URL request is triggered by an authenticated user;

Step S20, if yes, extract the plaintext query parameters in the URL request, and perform an encryption operation on the plaintext query parameters to obtain the ciphertext query parameters;

Step S30, replacing the plaintext query parameters in the URL request with the ciphertext query parameters to obtain an encrypted URL request, and send the encrypted URL request to the business system server;

Step S40: Receive the corresponding service data returned by the service system server based on the encrypted URL request, and output the service data at the front end of the service system.

The business system is an online system for processing business, in which a large amount of sensitive business data is circulated, and the security of the business system is very important. However, some illegal users will crawl business data from business systems by forging URLs, leading to business data leakage. In this regard, this embodiment provides a business data providing method, which can provide business data to users who have access and use rights to the business system, and prevent malicious data crawling.

In this embodiment, the business system may be specifically used to process at least one of house rental and sale business, insurance business, financial business, investment business, and the like. The business system includes a front-end controller and a server. The front-end controller is used to process URL requests and output business data at the front end of the business system, and the server is used to manage business data.

The following are the steps for implementing business data provision in this embodiment:

Step S10, when the front end of the business system receives a uniform resource locator URL request, it is judged whether the URL request is sent by an authenticated user;

In this embodiment, each business data in the business system has a unique URL (Uniform/Universal Resource Locator, uniform resource locator), the URL request to access the business system includes the transmission protocol, server (usually domain name, sometimes IP address), port number, path and query parameters and other components, such as "https://www. admin5.com/article/details/56284237", where the plaintext number "56284237" after the last "/" character at the end refers to the query parameter. When the front-end of the business system receives a URL request, the front-end controller first performs the first level of security protection and determines whether the URL request is triggered by an authenticated user. The authenticated user refers to a user who has the right to access and use the business system. Specifically, an authenticated user information database is pre-established in the front-end controller, and the authenticated user information database stores information such as an authenticated IP address and user ID of the authenticated user. The process of the front-end controller judging whether the URL request received by the front end of the business system is triggered by an authenticated user includes: matching the IP address and user ID that triggered the URL request with the authenticated user information database, if in the authenticated user information database, match If the authentication IP address that matches the IP address that triggered the URL request is matched, or the user ID that matches the user ID that triggered the URL request is matched, it is confirmed that the URL request is triggered by the authenticated user.

If the front controller confirms that the URL request is triggered by an authenticated user, the second level of security protection is performed. Specifically, the query parameters in the URL request are extracted, and then the query parameters are encrypted. The process of encrypting query parameters is as follows:

a. Convert the query parameter of the plaintext number into a byte array of preset length, the preset length is a fixed length, and the specific value is 8 bits;

b. Encrypt each element in the byte array through a preset symmetric encryption algorithm to obtain an encrypted byte array;

Among them, the preset symmetric encryption algorithm is agreed upon between the front-end controller and the server, which can be specifically Blowfish encryption algorithm. The Blowfish encryption algorithm is a block encryption algorithm developed by Bruce Schneier in 1993. It belongs to a type of symmetric encryption. The Blowfish encryption algorithm is used to encrypt each element in the byte array. The speed is very fast. The encryption key and decryption key of the Blowfish encryption algorithm are the same, and the result after each encryption is different, and the encrypted data is also reversible. The process of using the Blowfish encryption algorithm to encrypt each array element in the query parameters includes key preprocessing and encryption. Specifically, a key is selected arbitrarily, and the fixed source keys of the BlowFish algorithm—pbox and sbox are transformed to obtain the following The keys key_pbox and key_sbox used for one-step data encryption, and then use the keys key_pbox and key_sbox to encrypt each element in the byte array to obtain the encrypted byte array.

c. Encode the encrypted byte array to obtain the encoded byte array;

Among them, the encoding method is the base64 preset in the front-end controller. Base64 is one of the encoding methods used to transmit 8Bit byte codes, and is a method of representing binary data based on 64 printable characters.

d. Traverse each element in the coded byte array to determine the easily mixed elements, and according to the mapping relationship between the easily mixed characters and the preset characters, replace the easily mixed elements in the coded byte array with the preset characters to obtain the string For ciphertext, for example, replace the mixed character "=" with an underscore "_", and define the obtained string ciphertext as a ciphertext query parameter. For example, through the above processing, the number "1" is encrypted as "jzr13FqdpLk"; the number "2" is encrypted as "1QFpcUgueU4"; the number "17" is encrypted as "z_O0kIFslv0", it can be seen that after the encryption operation The characters obtained have no rules to follow and are difficult to imitate or forge.

After obtaining the ciphertext query parameter, the front-end controller replaces the query parameter in the URL request with the ciphertext query parameter to obtain the encrypted URL request. Since the ciphertext query parameters are obtained through the above encryption operation, this type of encrypted URL request is difficult to imitate or forge. After that, the encrypted URL request is sent to the server.

When the server receives the encrypted URL request, it decrypts and verifies the encrypted URL request, that is, the business system server extracts the ciphertext query parameter in the encrypted URL request, and then performs the inverse operation of the encryption operation on the ciphertext query parameter. If the inverse calculation is performed, the ciphertext query parameters can be restored to plaintext query parameters, the server confirms that the decryption verification is passed, obtains the corresponding business data and returns it to the front-end controller, and the front-end controller outputs the business data at the front end of the business system. If the ciphertext query parameters cannot be restored after the inverse operation, or the restoration becomes a pile of garbled codes, the server confirms that the decryption verification fails, and intercepts the malicious URL request.

Through the above method, if the front-end of the business system receives a URL request that is not an authenticated user, the front-end controller will intercept it to achieve the first level of security protection; even if a malicious request that imitates the encrypted URL request format can be delivered to the server, because the server The received URL request will be decrypted and verified, and the malicious URL request is not obtained based on the encryption operation method in this embodiment. The decryption verification of the malicious URL request cannot be passed, and the server will also intercept the malicious URL request to achieve With the second level of security protection, through the above two levels of security protection, the possibility of business data being crawled is greatly reduced, the security of the business system is improved, and the security of business data is guaranteed.

In the service data providing method proposed in this embodiment, the front-end controller of the service system will first determine whether the URL request received by the front-end of the service system is triggered by an authenticated user, which realizes the first level of security protection. If it is confirmed that the URL request is triggered by an authenticated user , Extract the plaintext query parameters in the URL request, perform an encryption operation on the plaintext query parameters to obtain the ciphertext query parameters, and then replace the plaintext query parameters in the URL request with the ciphertext query parameters to obtain the encrypted URL request, After that, the encrypted URL request is sent to the business system server, so that the business system server returns the corresponding business data based on the encrypted URL request, realizing the second level of security protection. In this way, it can be used by those who have the right to access and use the business system. Authenticated users provide business data, and malicious data crawling is prevented, ensuring the security of business data.

Further, a second embodiment of the method for providing service data of this application is proposed based on the first embodiment. The difference between the second embodiment of the service data providing method and the first embodiment of the service data providing method is that, referring to FIG. 3, the service data providing method in this embodiment is applied to a service system server, and the service data providing method includes the following step:

Step S50, when receiving the encrypted URL request sent by the front-end controller of the business system, decrypt and verify the encrypted URL request;

In this embodiment, when the business system server receives the encrypted URL request sent by the front-end controller, it decrypts and verifies the encrypted URL request, that is, the business system server extracts the ciphertext query parameters in the encrypted URL request, and The ciphertext query parameter performs the inverse operation of the encryption operation. After the inverse operation, the ciphertext query parameter can be restored to the query parameter of the plaintext number, and the decryption verification is determined to pass. The process of the inverse operation of the encryption operation performed by the business system server on the ciphertext query parameters is as follows:

e. Traverse each element in the ciphertext query parameter, find a preset character from the ciphertext query parameter, and according to the mapping relationship between the mixed character and the preset character, the found preset Replace the characters with the corresponding ambiguity characters to obtain the byte array to be decoded, that is, determine the characters that have been replaced in the ciphertext query parameters, and restore the characters that have been replaced;

f. Perform base64 decoding on the byte array to be decoded to obtain the decoded byte array;

g. Use the blowfish symmetric encryption algorithm agreed with the front controller to decrypt each element in the decoded byte array, that is, decrypt each element in the decoded byte array with the keys key_pbox and key_sbox to obtain the decrypted byte array ；

h. Convert the decrypted byte array into plaintext numbers;

After the above processing, if the ciphertext query parameter can be restored to the query parameter of the plaintext number, it is determined that the decryption verification is passed.

Step S60: When the decryption verification is passed, the corresponding business data is obtained and returned to the front-end controller of the business system, so that the front-end controller of the business system outputs the business data at the front-end of the business system.

When the business system server passes the decryption verification, it obtains the corresponding business data and returns it to the business system front-end controller, and the business system front-end controller outputs the business data at the front-end of the business system. If the ciphertext query parameters cannot be restored after the inverse operation, or the restoration becomes a pile of garbled codes, the server confirms that the decryption verification fails, and intercepts the malicious URL request.

Through the above method, even if a malicious request imitating the encrypted URL request format can be delivered to the server, the server will decrypt and verify the received URL request, and the malicious URL request is not obtained based on the encryption operation method in this embodiment, which is aimed at malicious The decryption verification of the URL request cannot be passed, and the server will also intercept the malicious URL request. In this way, it can provide business data for authenticated users who have access and use rights to the business system, and can intercept malicious URL requests based on encryption operations and decryption verification. It greatly reduces the possibility of business data being crawled.

In addition, the embodiment of the present application also provides a service data providing device.

Referring to Fig. 4, Fig. 4 is a schematic diagram of the functional modules of the first embodiment of the service data providing apparatus of this application.

In this embodiment, the service data providing device includes:

The judging module 10 is used for judging whether the URL request is triggered by an authenticated user when a uniform resource locator URL request is received at the front end of the business system;

The encryption module 20 is configured to, if yes, extract the plaintext query parameters in the URL request, and perform an encryption operation on the plaintext query parameters to obtain the ciphertext query parameters;

The replacement module 30 is configured to replace the plaintext query parameters in the URL request with the ciphertext query parameters to obtain an encrypted URL request, and send the encrypted URL request to the business system server;

The output module 40 is configured to receive the corresponding service data returned by the service system server based on the encrypted URL request, and output the service data at the front end of the service system.

Among them, each virtual function module of the above-mentioned service data providing apparatus is stored in the memory 1005 of the service data providing device shown in FIG. 1, and is used to realize all the functions of computer-readable instructions; when each module is executed by the processor 1001, multiple functions are realized. Security protection can provide business data to authenticated users with business system access and use rights, and prevent malicious data crawling, ensuring the security of business data.

Further, the encryption module 20 includes:

An encoding unit for encoding the encrypted array to obtain an encoding array;

The replacement unit is used to traverse each element in the coded array, determine the easily mixed elements in the coded array, and replace the easily mixed elements in the coded array with corresponding presets according to a preset mapping relationship Character to get the ciphertext query parameter.

Further, the encryption unit includes:

The preprocessing subunit is used to preprocess the source key of the preset symmetric encryption algorithm to obtain the key;

The encryption subunit is used to encrypt each element in the array using the key to obtain an encrypted array.

Further, the service data providing device further includes:

The interception module is used to intercept the URL request if not.

Further, the service data providing device further includes:

The return module is used to obtain corresponding business data and return it to the front-end controller of the business system when the decryption verification is passed, so that the front-end controller of the business system outputs the business data at the front-end of the business system.

Further, the decryption module includes:

Further, the inverse operation unit includes:

The replacement subunit is used to traverse each element in the ciphertext query parameter, find a preset character from the ciphertext query parameter, and replace the found preset character with the corresponding one according to the preset mapping relationship The mixed characters of, get the array to be decoded;

A decoding subunit for decoding the array to be decoded to obtain a decoding array;

The decryption subunit is used to decrypt each element in the decoded array by using a preset symmetric encryption algorithm to obtain a decrypted array;

The atomic reduction unit is used to restore the decrypted array to plaintext query parameters.

Among them, the function realization of each module in the above-mentioned service data providing apparatus corresponds to each step in the above-mentioned embodiment of the service data providing method, and the function and realization process thereof will not be repeated here.

In addition, the embodiments of the present application also provide a computer-readable storage medium, and the computer-readable storage medium may be a non-volatile readable storage medium.

The computer-readable storage medium of the present application stores computer-readable instructions, and when the computer-readable instructions are executed by a processor, the steps of the above-mentioned service data providing method are realized.

For the method implemented when the computer-readable instruction is executed, refer to the various embodiments of the service data providing method of the present application, which will not be repeated here.

It should be noted that in this article, the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or system including a series of elements not only includes those elements, It also includes other elements that are not explicitly listed, or elements inherent to the process, method, article, or system. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other identical elements in the process, method, article or system that includes the element.

The serial numbers of the foregoing embodiments of the present application are only for description, and do not represent the advantages and disadvantages of the embodiments.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method of the above embodiments can be implemented by means of software plus the necessary general hardware platform. Of course, it can also be implemented by hardware, but in many cases the former is better.的实施方式。 Based on this understanding, the technical solution of this application essentially or the part that contributes to the existing technology can be embodied in the form of a software product, and the computer software product is stored in a storage medium (such as ROM/RAM) as described above. , Magnetic disk, optical disk), including several instructions to make a terminal device (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) execute the method described in each embodiment of the present application.

The above are only preferred embodiments of this application, and do not limit the scope of this application. Any equivalent structure or equivalent process transformation made using the content of the description and drawings of this application, or directly or indirectly used in other related technical fields , The same reason is included in the scope of patent protection of this application.

Claims

A method for providing service data is characterized in that the method for providing service data is applied to a front-end controller of a service system, and the method for providing service data includes the following steps:

When receiving a uniform resource locator URL request at the front end of the business system, determine whether the URL request is triggered by an authenticated user;

If yes, extract the plaintext query parameters in the URL request, and perform an encryption operation on the plaintext query parameters to obtain the ciphertext query parameters;

Replacing the plaintext query parameters in the URL request with the ciphertext query parameters to obtain an encrypted URL request, and send the encrypted URL request to the business system server;

Receiving the corresponding service data returned by the service system server based on the encrypted URL request, and outputting the service data at the front end of the service system;

Wherein, the step of performing an encryption operation on the plaintext query parameter to obtain the ciphertext query parameter includes:

Converting the plaintext query parameter into an array of preset length;

Encrypt each element in the array by a preset symmetric encryption algorithm to obtain an encrypted array;

Encode the encrypted array to obtain an encoded array;

Traverse each element in the coded array, determine the easily mixed elements in the coded array, and replace the easily mixed elements in the coded array with corresponding preset characters according to the preset mapping relationship to obtain the ciphertext Query parameters.
The method for providing service data according to claim 1, wherein the step of encrypting each element in the array by using a preset symmetric encryption algorithm to obtain an encrypted array comprises:

Preprocessing the source key of the preset symmetric encryption algorithm to obtain the key;

Encrypt each element in the array using the key to obtain an encrypted array.
The service data providing method according to claim 1, wherein after the step of determining whether the URL request is triggered by an authenticated user, the method further comprises:

If not, intercept the URL request.
A method for providing service data is characterized in that the method for providing service data is applied to a service system server, and the method for providing service data includes the following steps:

When receiving the encrypted URL request sent by the front-end controller of the business system, decrypt and verify the encrypted URL request;

When the decryption verification is passed, obtain the corresponding business data and return it to the front-end controller of the business system, so that the front-end controller of the business system outputs the business data at the front-end of the business system;

Wherein, the step of decrypting and verifying the encrypted URL request includes:

Extracting ciphertext query parameters from the encrypted URL request;

Performing the inverse operation of the encryption operation on the ciphertext query parameter;

If the ciphertext query parameter is restored to the plaintext query parameter through the inverse operation, it is confirmed that the decryption verification is passed.
The service data providing method according to claim 4, wherein the step of performing the inverse operation of the encryption operation on the ciphertext query parameter comprises:

Traverse each element in the ciphertext query parameter, find a preset character from the ciphertext query parameter, and replace the found preset character with the corresponding miscible character according to the preset mapping relationship, to obtain Array to be decoded;

Decode the array to be decoded to obtain a decoded array;

Decrypt each element in the decoded array by using a preset symmetric encryption algorithm to obtain a decrypted array;

Restore the decrypted array to plaintext query parameters.
A service data providing device, characterized in that, the service data providing device includes:

The judgment module is used for judging whether the URL request is triggered by an authenticated user when the uniform resource locator URL request is received at the front end of the business system;

The encryption module is used to extract the plaintext query parameters in the URL request, and perform an encryption operation on the plaintext query parameters to obtain the ciphertext query parameters;

The replacement module is configured to replace the plaintext query parameters in the URL request with the ciphertext query parameters to obtain an encrypted URL request, and send the encrypted URL request to the business system server;

An output module, configured to receive the corresponding business data returned by the business system server based on the encrypted URL request, and output the business data at the front end of the business system;

Wherein, the encryption module includes:

A conversion unit for converting the plaintext query parameter into an array of preset length;

An encryption unit, configured to encrypt each element in the array by using a preset symmetric encryption algorithm to obtain an encrypted array;

An encoding unit for encoding the encrypted array to obtain an encoding array;

The replacement unit is used to traverse each element in the coded array, determine the easily mixed elements in the coded array, and replace the easily mixed elements in the coded array with corresponding presets according to a preset mapping relationship Character to get the ciphertext query parameter.
7. The service data providing device according to claim 6, wherein the encryption unit comprises:

The preprocessing subunit is used to preprocess the source key of the preset symmetric encryption algorithm to obtain the key;

The encryption subunit is used to encrypt each element in the array using the key to obtain an encrypted array.
7. The service data providing device according to claim 6, wherein the service data providing device further comprises:

The interception module is used to intercept the URL request if not.
A service data providing device, characterized in that, the service data providing device includes:

The decryption module is used to decrypt and verify the encrypted URL request when the encrypted URL request sent by the front-end controller of the business system is received;

The return module is used to obtain corresponding business data and return it to the front-end controller of the business system when the decryption verification is passed, so that the front-end controller of the business system outputs the business data at the front-end of the business system;

Wherein, the decryption module includes:

An extraction unit for extracting ciphertext query parameters from the encrypted URL request;

An inverse operation unit, configured to perform the inverse operation of the encryption operation on the ciphertext query parameter;

The confirming unit is configured to confirm that the decryption verification is passed if the ciphertext query parameter is restored to the plaintext query parameter through the inverse operation.
9. The service data providing device according to claim 9, wherein the inverse operation unit comprises:

The replacement subunit is used to traverse each element in the ciphertext query parameter, find a preset character from the ciphertext query parameter, and replace the found preset character with the corresponding one according to the preset mapping relationship The mixed characters of, get the array to be decoded;

A decoding subunit for decoding the array to be decoded to obtain a decoding array;

The decryption subunit is used to decrypt each element in the decoded array by using a preset symmetric encryption algorithm to obtain a decrypted array;

The atomic reduction unit is used to restore the decrypted array to plaintext query parameters.
A service data providing device, wherein the service data providing device includes a processor, a memory, and computer readable instructions stored on the memory and executable by the processor, wherein the computer readable When the instruction is executed by the processor, the following steps are implemented:

When receiving a uniform resource locator URL request at the front end of the business system, determine whether the URL request is triggered by an authenticated user;

If yes, extract the plaintext query parameters in the URL request, and perform an encryption operation on the plaintext query parameters to obtain the ciphertext query parameters;

Replacing the plaintext query parameters in the URL request with the ciphertext query parameters to obtain an encrypted URL request, and send the encrypted URL request to the business system server;

Receiving the corresponding service data returned by the service system server based on the encrypted URL request, and outputting the service data at the front end of the service system;

When the computer-readable instructions are executed by the processor, the following steps are further implemented:

Converting the plaintext query parameter into an array of preset length;

Encrypt each element in the array by a preset symmetric encryption algorithm to obtain an encrypted array;

Encode the encrypted array to obtain an encoded array;

Traverse each element in the coded array, determine the easily mixed elements in the coded array, and replace the easily mixed elements in the coded array with corresponding preset characters according to the preset mapping relationship to obtain the ciphertext Query parameters.
The service data providing device according to claim 11, wherein when the computer-readable instruction is executed by the processor, the following steps are further implemented:

Preprocessing the source key of the preset symmetric encryption algorithm to obtain the key;

Encrypt each element in the array using the key to obtain an encrypted array.
The service data providing device according to claim 11, wherein when the computer-readable instruction is executed by the processor, the following steps are further implemented:

If not, intercept the URL request.
A service data providing device, wherein the service data providing device includes a processor, a memory, and computer readable instructions stored on the memory and executable by the processor, wherein the computer readable When the instruction is executed by the processor, the following steps are implemented:

When receiving the encrypted URL request sent by the front-end controller of the business system, decrypt and verify the encrypted URL request;

When the decryption verification is passed, obtain the corresponding business data and return it to the front-end controller of the business system, so that the front-end controller of the business system outputs the business data at the front-end of the business system;

When the computer-readable instructions are executed by the processor, the following steps are further implemented:

Extracting ciphertext query parameters from the encrypted URL request;

Performing the inverse operation of the encryption operation on the ciphertext query parameter;

If the ciphertext query parameter is restored to the plaintext query parameter through the inverse operation, it is confirmed that the decryption verification is passed.
The service data providing device according to claim 14, wherein when the computer-readable instructions are executed by the processor, the following steps are further implemented:

Traverse each element in the ciphertext query parameter, find a preset character from the ciphertext query parameter, and replace the found preset character with the corresponding miscellaneous character according to the preset mapping relationship to obtain Array to be decoded;

Decode the array to be decoded to obtain a decoded array;

Decrypt each element in the decoded array by a preset symmetric encryption algorithm to obtain a decrypted array;

Restore the decrypted array to plaintext query parameters.
A computer-readable storage medium, characterized in that computer-readable instructions are stored on the computer-readable storage medium, and when the computer-readable instructions are executed by a processor, the following steps are implemented:

When receiving a uniform resource locator URL request at the front end of the business system, determine whether the URL request is triggered by an authenticated user;

If yes, extract the plaintext query parameters in the URL request, and perform an encryption operation on the plaintext query parameters to obtain the ciphertext query parameters;

Replacing the plaintext query parameters in the URL request with the ciphertext query parameters to obtain an encrypted URL request, and send the encrypted URL request to the business system server;

Receiving the corresponding service data returned by the service system server based on the encrypted URL request, and outputting the service data at the front end of the service system;

When the computer-readable instructions are executed by the processor, the following steps are further implemented:

Converting the plaintext query parameter into an array of preset length;

Encrypt each element in the array by a preset symmetric encryption algorithm to obtain an encrypted array;

Encode the encrypted array to obtain an encoded array;

Traverse each element in the coded array, determine the easily mixed elements in the coded array, and replace the easily mixed elements in the coded array with corresponding preset characters according to the preset mapping relationship to obtain the ciphertext Query parameters.
The computer-readable storage medium of claim 16, wherein when the computer-readable instructions are executed by the processor, the following steps are further implemented:

Preprocessing the source key of the preset symmetric encryption algorithm to obtain the key;

Encrypt each element in the array using the key to obtain an encrypted array.
The computer-readable storage medium of claim 16, wherein when the computer-readable instructions are executed by the processor, the following steps are further implemented:

If not, intercept the URL request.
A computer-readable storage medium, characterized in that computer-readable instructions are stored on the computer-readable storage medium, and when the computer-readable instructions are executed by a processor, the following steps are implemented:

When receiving the encrypted URL request sent by the front-end controller of the business system, decrypt and verify the encrypted URL request;

When the decryption verification is passed, obtain the corresponding business data and return it to the front-end controller of the business system, so that the front-end controller of the business system outputs the business data at the front-end of the business system;

When the computer-readable instructions are executed by the processor, the following steps are implemented:

The step of decrypting and verifying the encrypted URL request includes:

Extracting ciphertext query parameters from the encrypted URL request;

Performing the inverse operation of the encryption operation on the ciphertext query parameter;

If the ciphertext query parameter is restored to the plaintext query parameter through the inverse operation, it is confirmed that the decryption verification is passed.
The computer-readable storage medium of claim 19, wherein when the computer-readable instructions are executed by the processor, the following steps are further implemented:

Traverse each element in the ciphertext query parameter, find a preset character from the ciphertext query parameter, and replace the found preset character with the corresponding miscellaneous character according to the preset mapping relationship to obtain Array to be decoded;

Decode the array to be decoded to obtain a decoded array;

Decrypt each element in the decoded array by a preset symmetric encryption algorithm to obtain a decrypted array;

Restore the decrypted array to plaintext query parameters.