WO2021129676A1

WO2021129676A1 - Uri construction method and apparatus, and medium and device

Info

Publication number: WO2021129676A1
Application number: PCT/CN2020/138676
Authority: WO
Inventors: 李逸骏; 蔡少君
Original assignee: 贵州白山云科技股份有限公司
Priority date: 2019-12-27
Filing date: 2020-12-23
Publication date: 2021-07-01
Also published as: CN113055343B; CN113055343A

Abstract

The present disclosure relates to a URI construction method and apparatus, and a medium and a device. The URI construction method comprises: extracting a key field from a target URI; encrypting the key field, encoding the encrypted key field, and then generating a first character string; generating an encrypted URI on the basis of the first character string; and sending the encrypted URI. The present invention can effectively prevent intermediate hijacking, expose access intent, and protect the user's privacy, is used for scheduling, and can also hide a scheduling policy, thereby protecting the security of a scheduling system and a service server.

Description

A URI construction method, device, medium and equipment

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office, the application number is 201911372781.6, and the title of the invention is "URI construction method, device, medium and equipment" on December 27, 2019, the entire content of which is incorporated herein by reference. Applying.

Technical field

This article relates to Internet technology, especially to URI construction methods, devices, media and equipment.

Background technique

In related technologies, the client HTTP access request is usually a plain text URL. Under the hijacking of the middleman, the access intention will be completely exposed, leading to further hijacking or exposing the client's privacy records. Furthermore, if the server uses scheduling technology such as 302, the redirect URL is also in plain text, which can easily reveal the scheduling strategy.

Summary of the invention

The following is an overview of the topics detailed in this article. This summary is not intended to limit the scope of protection of the claims.

In order to overcome the problems in related technologies, this article provides a URI construction method, device, medium and equipment.

According to the first aspect of this article, a URI construction method is provided, which is applied to the sender, including:

Extract the key fields in the target URI;

Encrypt the key field, and encode the encrypted key field to generate a first character string;

Generating an encrypted URI based on the first character string;

Send the encrypted URI.

The encrypting the key field and generating a first character string after encoding includes:

Based on the pre-defined first serial number KEY1, the second serial number KEY2 is obtained after calculation according to a predetermined algorithm;

Based on the second serial number KEY2, an encryption operation is performed on the key field, and a first character string is generated after encoding.

The second sequence number KEY2 obtained after the operation according to a predetermined algorithm based on the pre-defined first sequence number KEY1 includes:

Calculate the first serial number KEY1 according to a predetermined algorithm to obtain the second serial number KEY2;

Alternatively, a random value is generated by a random number generator or a timestamp, and after the random value is spliced with the first serial number KEY1, it is calculated according to a predetermined algorithm to obtain the second serial number KEY2.

Also includes:

Generate a second character string after encoding the random value;

The generating an encrypted URI based on the first character string includes:

When the first serial number KEY1 is calculated according to a predetermined algorithm to obtain the second serial number KEY2, the remaining fields after extracting the key fields from the first character string and the target URI are spliced according to preset rules or After splicing according to preset rules, specific fields are inserted to form an encrypted URI.

When the random value is spliced with the first serial number KEY1, and the second serial number KEY2 is obtained according to a predetermined algorithm, the first character string, the second character string, and the target After the URI extracts the key fields, the remaining fields are spliced according to preset rules or specific fields are inserted after splicing according to preset rules to form an encrypted URI.

Applied to the receiving end, including:

Receive encrypted URI request;

Extracting the first character string in the encrypted URI request;

Decrypt the first character string to obtain key fields;

Use the key field to replace the first character string in the encrypted URI, and restore the encrypted URI to the target URI.

The decrypting the first character string and obtaining the key field includes:

Decode the first character string to obtain an encrypted key field;

Based on the second serial number KEY2, a decryption operation is performed on the encrypted key field to obtain the key field.

When the encrypted URI request includes the first character string and the second character string, the second sequence number KEY2 obtained after calculation based on the pre-defined first sequence number KEY1 includes: obtaining the second sequence number KEY2 after decoding the second character string Random value, after splicing the random value with the first serial number KEY1, calculate according to a predetermined algorithm to obtain the second serial number KEY2.

According to another aspect of this article, a URI construction device is provided, which is applied to the sender, and includes:

The key field extraction module is used to extract the key fields in the target URI;

An encryption module for encrypting the key field, and the encrypted key field is encoded to generate a first character string;

An encrypted URI generating module, configured to generate an encrypted URI based on the first character string;

The sending module is used to send the encrypted URI.

The first character string generated by the encryption module includes:

Alternatively, a random number is generated by a random number generator or a time stamp, and after the random number is spliced with the first serial number KEY1, a predetermined algorithm is used to obtain the second serial number KEY2.

The encryption module is also used to generate a second character string after encoding the random value;

The generating an encrypted URI based on the first character string includes:

When the first serial number KEY1 is calculated according to a predetermined algorithm to obtain the second serial number KEY2, the remaining fields after the key fields are extracted from the first character string and the target URI are spliced according to preset rules Or insert specific fields after splicing according to preset rules to form an encrypted URI.

URI construction device, applied to the receiving end, including:

The receiving module is used to receive encrypted URI requests;

A character string extraction module, which extracts the first character string;

A decryption module to decrypt the first character string to obtain a key field;

The restoration module is configured to replace the first encrypted character string in the encrypted URI with the key field, and restore the encrypted URI to the target URI.

The decrypting the first character string and obtaining the original key field includes:

Decode the first character string to obtain an encrypted key field;

When the encrypted URI request only includes the first character string, the second sequence number KEY2 obtained after calculation based on the pre-defined first serial number KEY1 according to a predetermined algorithm includes: the pre-defined first serial number KEY1 Operate according to a predetermined algorithm to obtain the second serial number KEY2;

When the encrypted URI request includes the first character string and the second character string, the second sequence number KEY2 obtained after the operation according to a predetermined algorithm based on the pre-defined first serial number KEY1 includes: A random value is obtained after decoding, and after the random value is spliced with the first serial number KEY1, a predetermined algorithm is used to obtain the second serial number KEY2.

According to another aspect of this document, there is provided a computer-readable storage medium on which a computer program is stored, which implements the steps of the URI construction method when the computer program is executed.

According to another aspect of this document, there is provided a computer device including a processor, a memory, and a computer program stored on the memory, and the processor implements the steps of the URI construction method when the processor executes the computer program.

This article uses the RUI construction method to realize that the sender encrypts the target URI and sends it to the receiver. After receiving the encrypted URI request, the receiver decrypts the encrypted URI and restores it to the original target URI. It can effectively prevent intermediate hijacking to obtain real access intentions and private information. At the same time, due to the addition of random values, even if the same resource is obtained, different encrypted URIs will be generated, avoiding cache pollution caused by intermediate hijacking. However, to implement the URI encryption method in this article, there is no need to carry out complicated transformations on the existing server, and only a simple encoding device and/or decryption device is set on the server or client side.

It should be understood that the above general description and the following detailed description are only exemplary and explanatory, and should not limit this text.

Description of the drawings

The drawings described here are used to provide a further understanding of the embodiments of the present invention and constitute a part of this application. The schematic embodiments of the embodiments of the present invention and their descriptions are used to explain the embodiments of the present invention, and do not constitute an example of the embodiments of the present invention. The improper qualification. In the attached picture:

Fig. 1 is a flow chart showing a method for constructing a URI according to an exemplary embodiment.

Fig. 2 is a flow chart showing a method for constructing a URI according to an exemplary embodiment.

Fig. 3 is a block diagram showing a URI construction device according to an exemplary embodiment.

Fig. 4 is a block diagram showing a URI construction device according to an exemplary embodiment.

Fig. 5 is a block diagram showing a computer device according to an exemplary embodiment.

Detailed ways

In order to make the purpose, technical solutions and advantages of the embodiments of this document clearer, the technical solutions in the embodiments of this document will be described clearly and completely in conjunction with the accompanying drawings in the embodiments of this document. Obviously, the described embodiments are of this document. Some embodiments, not all embodiments. Based on the embodiments herein, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the scope of protection herein. It should be noted that the embodiments in the application and the features in the embodiments can be combined with each other arbitrarily if there is no conflict.

Figure 1 is a flowchart of the URI construction method. As shown in Figure 1, the URI construction method is applied to the sender, including:

Step S11, extract key fields in the target URI;

Step S12, encrypting the key field, and encoding the encrypted key field to generate a first character string;

Step S13, generating an encrypted URI based on the first character string;

Step S14: Send the encrypted URI.

In order to prevent intermediate hijacking, the sender encrypts the key fields in the target URI to be sent and sends the encrypted URI. The request sent by the client is no longer a plaintext URI, and the scheduling information sent by the server is no longer a plaintext URI, which can effectively prevent intermediate hijacking. The key field, determined according to actual conditions, can be the name of the target file to be accessed, or the entire path of the file, to achieve the purpose of hiding the access intent.

In an embodiment, in step S12, encrypting the key field, and generating the first character string after encoding includes:

Based on the second serial number KEY2, an encryption operation is performed on the key field, and the first character string is generated after encoding.

In the URI construction method in this article, in order to ensure that the encrypted URI sent by the sender can be parsed, it is necessary to predefine the first serial number and agree on a predetermined algorithm. The sender obtains the second serial number KEY2 based on the first serial number KEY1 according to a predetermined algorithm, and uses the second serial number KEY2 to encrypt the extracted key field. The decryptor also obtains the second serial number KEY2 based on the first serial number KEY1 according to the same predetermined algorithm, and uses the second serial number KEY2 to perform the inverse operation on the encrypted key field for decryption. The predetermined algorithm in this article can be any algorithm, such as calculating a hash value, or splicing a specific character string, etc. The purpose is to make the sending end and the receiving end calculate the second sequence number KEY2 according to the predefined first sequence number, and use The same second serial number KEY2 is encrypted or decrypted.

After the sender uses the second serial number to encrypt the key field, the first character string is generated.

For example, the original URI is http://www.baidu.com/doc/2019/readme.txt

The client first determines the key field according to the access intention. In this embodiment, the key field is determined to be /doc/2019/readme.txt;

The pre-defined first serial number KEY1 is text;

For [’t’,’e’,’s’,’t’], the second sequence number key2 is obtained after a predetermined algorithm.

Through the preset encryption algorithm fn(key2,path), path is the key field. In this embodiment, it is /doc/2019/readme.txt. After the key field is encrypted, the hexadecimal encoding is :

7a0a071622dec2118eccc5a4b6b1110e85a3989aafd67e594b87c46d28dde2c8 90b4f088

Follow the sequence of splicing rules to form a new URI:

http://www.baidu.com/7a0a071622dec2118eccc5a4b6b1110e85a3989aafd67e594b87c46d28dde2c890b4f088

In this way, even if the access request is hijacked, the hijacker cannot know the specific request content, which protects the client's private information.

In one embodiment, based on the pre-defined first sequence number KEY1, the second sequence number KEY2 obtained after calculation according to a predetermined algorithm includes:

Calculate the pre-defined first serial number KEY1 according to a predetermined algorithm to obtain the second serial number KEY2;

For example, the above encryption process for the original URI of http://www.baidu.com/doc/2019/readme.txt, after being encrypted in this way, may cause the same URI request of different clients to be completely the same after encryption. Therefore, the URI construction method in this article also provides the following method to generate a random value through a random number generator or a timestamp, and after the random value is spliced with the first serial number KEY1, a predetermined algorithm is used to calculate the second serial number KEY2. The second sequence number KEY2 used for encryption and decryption is generated based on the random value of the sender and the first sequence number KEY1. Different senders generate different KEY2, so that the encryption requests sent by different senders are unique, which further avoids being The possibility of hijacking and tampering in the middle.

The URI construction method in this article also includes generating a second string after encoding a random value;

When the first serial number KEY1 is calculated through the predefined rules to obtain the second serial number KEY2, the remaining fields after extracting the key fields from the first string and the target URI are spliced according to preset rules or after splicing according to preset rules Then insert specific fields to form an encrypted URI.

After concatenating the random value with the first serial number KEY1, calculate the second serial number KEY2 through predefined rules, extract the first string, the second string, and the target URI to the remaining fields after extracting the key fields, press Splicing by preset rules or inserting specific fields after splicing by preset rules to form an encrypted URI. If the key field is encrypted, the second serial number KEY2 used is calculated from the first serial number KEY1 and a random value. In order to enable the receiving end to calculate the second serial number KEY2 according to the first serial number KEY1, it also needs The second character string is sent to the receiving end, so that the receiving end calculates a random value according to the second character string through the inverse operation of the preset algorithm.

Because the second character string is generated based on the machine random number or timestamp, even if the same user accesses the same content, the encrypted request will be different.

At the same time, due to different usage scenarios, different methods will be used when constructing encrypted URIs. For example, when the client sends an encrypted URI request, the first string {new_path}, the second string {new_nonce} (if any) and the remaining fields after extracting the key fields from the target URI, can be spliced according to the preset rules. For example: https://domain{new_nonce}{new_path}. In some special scenarios, such as scheduling scenarios, in addition to splicing the content to be spliced according to preset rules, specific fields are also inserted, such as: https://domain/diaodu/{new_nonce}{new_path}, the first After the second string is spliced with the domain, a specific field is inserted: diaodu. The receiving end can know that the received URI is the scheduled URI.

Figure 2 is a flowchart of the URI construction method. As shown in Figure 1, the URI construction method is applied to the receiving end, including:

Step S21, receiving an encrypted URI request;

Step S22: Extract the first character string in the encrypted URI request;

Step S23: Decrypt the first character string to obtain key fields;

Step S24: Use the key field to replace the first encrypted character string in the encrypted URI, and restore the encrypted URI to the target URI.

After receiving the encrypted URI request, the receiver extracts the first string, and uses the inverse algorithm corresponding to the encryption algorithm to decrypt the first string, so as to restore the encrypted URI to the original target URI, and proceed according to the original target URI. response.

In an embodiment, step S23 decrypts the first character string, and obtaining the key field includes:

Decode the first character string to obtain the encrypted key field;

Based on the second serial number KEY2, the encrypted key field is decrypted to obtain the key field.

When the encrypted URI request only includes the first character string, based on the pre-defined first serial number KEY1, the second serial number KEY2 obtained after the encryption operation includes: the pre-defined first serial number KEY1 is calculated according to the predetermined algorithm, and the result is obtained. The second serial number KEY2; at this time, the receiving end only needs to calculate the second serial number KEY2 according to the preset first serial number KEY1 and the predetermined algorithm.

When the encrypted URI request includes the first character string and the second character string, based on the pre-defined first serial number KEY1, the second serial number KEY2 obtained after calculation according to a predetermined algorithm includes: obtaining a random value after decoding the second character string, After splicing the random value with the first serial number KEY1, calculate according to a predetermined algorithm to obtain the second serial number KEY2. If the sending end calculates the second sequence number KEY2 based on the first sequence number and random value, the receiving end needs to decode the second string first to obtain the corresponding random number in order to obtain the same second sequence number KEY2 The numerical value is calculated based on the first serial number and the random value to obtain the same second serial number KEY2.

It can be seen that in the decryption process, the receiver also obtains the second sequence number KEY2 after the same encryption operation according to the pre-defined first sequence number KEY1, which guarantees the second sequence number used in the encryption process with the sender KEY2 is exactly the same and can decrypt the encrypted key field.

In order to better understand the URI construction method in this article, an example is as follows:

Specific embodiment one:

Assume that the strategy for extracting key fields is: extract all strings after the URI domain name; generate random values through a random number generator, the strings are binary, [0x4,0x8,0x6,0x7], and the random values are represented by nonce; pre-defined The first serial number KEY1 is "test"; the binary sequence is converted into a string using hexadecimal notation; the predetermined algorithm is to calculate the hash value MD5 after the first serial number KEY1 and the nonce are spliced, and the original URI is:

http://www.baidu.com/doc/2019/readme.txt.

The sending end can be a client or a server. Before sending the above URI, an encrypted URI is generated first. The key field extracted by the sender is /doc/2019/readme.txt.

First, splice the random value nonce and the first serial number KEY, ['t','e','s','t',0x4,0x8,0x6,0x7], and then calculate the MD5 to get the second serial number KEY2 for:

[0x94,0xa4,0x8b,0x86,0x99,’w’,0xbe,0x88,0x17,0xff,0xc9,0x96,’E’,0xe1,0xaa,0x1a]

Use, for example, the AES128_GCM encryption algorithm and the second sequence number KEY2 to encrypt the key field /doc/2019/readme.txt, and the result is [0x7a,0x0a,0x07,0x16,0x22,0xde,0xc2,0x11, 0xcc,0xc5,0xa4,0xb6,0xb1,0x11,0x0e,0x85,0xa3,0x98,0x9a,0xaf,0xd6,0x7e,0x59,0x4b,0x87,0xc4,0x6d,0x28,0x90,0xe2 0xf0,0x88]

After hexadecimal encoding, the encrypted key field is represented by new_path, which is 7a0a071622dec2118eccc5a4b6b1110e85a3989aafd67e594b87c46d28dde2c890b4 f088

For the random value nonce:[0x4,0x8,0x6,0x7], it is coded in hexadecimal and expressed as new_nonce, and new_nonce is 04080607.

Follow the sequence of splicing rules to form an encrypted URI:

After concatenating the first character string and the second character string, the remaining fields after extracting the key fields with the target URI form an encrypted URI: http://www.baidu.com/[new_nonce][new_path].

That is, the encrypted URI is:

http://www.baidu.com/040806077a0a071622dec2118eccc5a4b6b1110e85a3989aafd67e594b87c46d28dde2c890b4f088.

After the server receives the encrypted URI,

Extract new_nonce as 04080607, and new_path as:

7a0a071622dec2118eccc5a4b6b1110e85a3989aafd67e594b87c46d28dde2c890b4f088

The inverse hexadecimal encoding of new_nonce is [0x4,0x8,0x6,0x7], and the inverse hexadecimal encoding of new_path is:

[0x7a,0x0a,0x07,0x16,0x22,0xde,0xc2,0x11,0x8e,0xcc,0xc5,0xa4,0xb6,0xb1,0x11,0x0e,0x85,0xa3,0x98,0x9a,0x0xaf,0x4b, ,0x87,0xc4,0x6d,0x28,0xdd,0xe2,0xc8,0x90,0xb4,0xf0,0x88]

Join the random value nonce and the first serial number KEY, ['t','e','s','t',0x4,0x8,0x6,0x7], and then calculate the MD5 to get the second serial number KEY2 as :

The key field decrypted by AES128_GCM is /doc/2019/readme.txt.

Use key fields to replace the first encrypted string in the encrypted URI, delete the second string, and restore the encrypted URI to the target URI: http://www.baidu.com/doc/2019/readme.txt.

Through the above methods, both the client and the server can encrypt the URI sent by themselves to prevent intermediate hijacking, protect privacy and security, and ensure system security.

Specific embodiment two:

In the dispatch scenario, after the dispatch server receives the client's original URI request or the encrypted URI request, it will generate a 302 response according to the dispatch policy. When a redirect URI needs to be generated, for example: the original redirect URI is:

HTTP/1.1 302 Found

Location: https://www.baidu.com/xxx

After encryption, reconstruct the URI into an encrypted URI:

HTTP/1.1 302 Found

Location: https://www.baidu.com/{new_nonce}{new_path}.

Here, new_nonce is the result of encoding the random number, and new_path is the result of encrypting the key field.

When the dispatch server constructs the encrypted URI, it can also insert a specific field (diaodu) into the encrypted URI according to its own settings:

HTTP/1.1 302 Found

Location: https://www.baidu.com/diaodu/{new_nonce}{new_path}.

The dispatch server can encrypt the URI of the target business server, hide the real address of the business server, and prevent the real address of the business server from being exposed after the response is hijacked, thereby protecting the dispatching strategy and improving the security of the business server.

It can be seen from the above embodiments that the RUL construction method provided in this article provides a method of encrypting and decrypting URIs. The sender encrypts the target URI and sends it to the receiver. After receiving the encrypted URI request, the receiver sends the encrypted URI to the encrypted URI. Decrypt and restore to the original target URI. It can effectively prevent intermediate hijacking to obtain real access intentions and private information. At the same time, due to the addition of random values, even requests for the same resource will generate different encrypted URIs, avoiding cache pollution caused by intermediate hijacking. However, to implement the URI encryption method in this article, there is no need to carry out complicated transformations on the existing server, and only a simple encoding device and/or decryption device is set on the server or client side.

FIG. 3 is a block diagram of a URI construction device. Referring to FIG. 3, the URI construction device is applied to the sending end and includes: a key field extraction module 301, an encryption module 302, an encrypted URI generation module 303, and a sending module 304.

The key field extraction module 301 is configured to extract key fields in the target URI;

The encryption module 302 is configured to encrypt the key field, and the encrypted key field is encoded to generate a first character string;

The encrypted URI generating module 303 is configured to generate an encrypted URI based on the first character string;

The sending module 304 is used to send the encrypted URI.

The first character string generated by the encryption module 302 includes:

Based on the pre-defined first serial number KEY1, the second serial number KEY2 obtained after calculation according to a predetermined algorithm includes:

Alternatively, a random value is generated by a random number generator or a timestamp, and after the random value is spliced with the first serial number KEY1, a predetermined algorithm is used to obtain the second serial number KEY2.

The encryption module 302 is also used to: generate a second character string after encoding the random value;

Based on the first string, generating an encrypted URI includes:

FIG. 4 is a block diagram of a URI construction device. Referring to FIG. 4, the URI construction device applied to the receiving end includes: a receiving module 401, a character string extraction module 402, a decryption module 403, and a restoration module 404.

The receiving module 401 is configured to receive encrypted URI requests;

The character string extraction module 402 is configured to extract the first character string;

The decryption module 403 is configured to decrypt the first character string to obtain key fields;

The restoration module 404 is configured to replace the first encrypted character string in the encrypted URI with the key field, and restore the encrypted URI to the target URI.

Decrypt the first string to obtain the original key fields including:

Decode the first character string to obtain the encrypted key field;

When the encrypted URI request only includes the first character string, based on the pre-defined first serial number KEY1, the second serial number KEY2 is calculated according to the predetermined algorithm, including: the pre-defined first serial number KEY1 is calculated according to the predetermined algorithm to obtain The second serial number KEY2;

When the encrypted URI request includes the first character string and the second character string, based on the pre-defined first serial number KEY1, the second serial number KEY2 obtained after calculation according to a predetermined algorithm includes: obtaining a random value after decoding the second character string, After the random value is spliced with the first serial number KEY1, it is calculated according to a predetermined algorithm to obtain the second serial number KEY2.

Regarding the device in the foregoing embodiment, the specific manner in which each module performs operation has been described in detail in the embodiment of the method, and detailed description will not be given here.

Fig. 5 is a block diagram showing a computer device 500 for URI construction according to an exemplary embodiment. For example, the computer device 500 may be provided as a server. 5, the computer device 500 includes a processor 501, and the number of processors can be set to one or more as required. The computer device 500 further includes a memory 502 for storing instructions executable by the processor 501, such as application programs. The number of memories can be set to one or more as required. The stored application programs can be one or more. The processor 501 is configured to execute instructions to execute the URI construction method.

Those skilled in the art should understand that the embodiments herein can be provided as methods, devices (equipment), or computer program products. Therefore, this specification may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, this document may take the form of a computer program product implemented on one or more computer-usable storage media containing computer-usable program codes. Computer storage media includes volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storing information (such as computer readable instructions, data structures, program modules, or other data) , Including but not limited to RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cartridge, magnetic tape, magnetic disk storage or other magnetic storage device, or can be used for Any other medium that stores desired information and can be accessed by a computer. In addition, as is well known to those of ordinary skill in the art, communication media usually contain computer-readable instructions, data structures, program modules, or other data in a modulated data signal such as carrier waves or other transmission mechanisms, and may include any information delivery media. .

This article is described with reference to flowcharts and/or block diagrams of methods, apparatuses (equipment) and computer program products according to the embodiments of this article. It should be understood that each process and/or block in the flowchart and/or block diagram, and the combination of processes and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing equipment to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing equipment are used to generate It is a device that realizes the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable data processing equipment to work in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture including the instruction device. The device implements the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be loaded on a computer or other programmable data processing equipment, so that a series of operation steps are executed on the computer or other programmable equipment to produce computer-implemented processing, so as to execute on the computer or other programmable equipment. The instructions provide steps for implementing the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

In this article, the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that an article or device that includes a series of elements includes not only those elements, but also other elements that are not explicitly listed. Elements, or also include elements inherent to such items or equipment. If there are no more restrictions, the element defined by the sentence "including..." does not exclude the existence of another same element in the article or equipment that includes the element.

Although the preferred embodiments herein have been described, those skilled in the art can make additional changes and modifications to these embodiments once they learn the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications falling within the scope of this document.

Obviously, those skilled in the art can make various changes and modifications to this article without departing from the spirit and scope of this article. In this way, if these modifications and variations of this text fall within the scope of the claims of this text and their equivalent technologies, the intention of this text also includes these modifications and variations.

Industrial applicability

When the sender sends a URI request, it encrypts the target URI and sends it to the receiver. After receiving the encrypted URI request, the receiver decrypts the encrypted URI and restores it to the original target URI. It can effectively prevent intermediate hijacking to obtain real access intentions and private information. At the same time, due to the addition of random values, even if the same resource is obtained, different encrypted URIs will be generated, avoiding cache pollution caused by intermediate hijacking.

Claims

A URI construction method, applied to the sender, characterized in that it includes:

Extract the key fields in the target URI;

Encrypt the key field, and encode the encrypted key field to generate a first character string;

Generating an encrypted URI based on the first character string;

Send the encrypted URI.
The URI construction method according to claim 1, wherein said encrypting said key field and generating a first character string after encoding comprises:

Based on the pre-defined first serial number KEY1, the second serial number KEY2 is obtained after calculation according to a predetermined algorithm;

Based on the second serial number KEY2, an encryption operation is performed on the key field, and a first character string is generated after encoding.
The URI construction method according to claim 2, characterized in that the second sequence number KEY2 obtained after calculating according to a predetermined algorithm based on the pre-defined first sequence number KEY1 comprises:

Calculate the first serial number KEY1 according to a predetermined algorithm to obtain the second serial number KEY2;

Alternatively, a random value is generated by a random number generator or a timestamp, and after the random value is spliced with the first serial number KEY1, it is calculated according to a predetermined algorithm to obtain the second serial number KEY2.
The URI construction method according to claim 3, further comprising:

Generate a second character string after encoding the random value;

The generating an encrypted URI based on the first character string includes:

When the first serial number KEY1 is calculated according to a predetermined algorithm to obtain the second serial number KEY2, the remaining fields after extracting the key fields from the first character string and the target URI are spliced according to preset rules or After splicing according to preset rules, insert specific fields to form an encrypted URI;

When the random value is spliced with the first serial number KEY1, and the second serial number KEY2 is obtained according to a predetermined algorithm, the first character string, the second character string, and the target After the URI extracts the key fields, the remaining fields are spliced according to preset rules or specific fields are inserted after splicing according to preset rules to form an encrypted URI.
A URI construction method, applied to the receiving end, is characterized in that it includes:

Receive encrypted URI request;

Extracting the first character string in the encrypted URI request;

Decrypt the first character string to obtain key fields;

Use the key field to replace the first character string in the encrypted URI, and restore the encrypted URI to the target URI.
The method for constructing a URI according to claim 5, wherein said decrypting said first character string and obtaining key fields comprises:

Decode the first character string to obtain an encrypted key field;

Based on the pre-defined first serial number KEY1, the second serial number KEY2 is obtained after calculation according to a predetermined algorithm;

Based on the second serial number KEY2, a decryption operation is performed on the encrypted key field to obtain the key field.
The URI construction method according to claim 6, characterized in that,

When the encrypted URI request includes the first character string and the second character string, the second sequence number KEY2 obtained after calculation based on the pre-defined first sequence number KEY1 includes: obtaining the second sequence number KEY2 after decoding the second character string Random value, after splicing the random value with the first serial number KEY1, calculate according to a predetermined algorithm to obtain the second serial number KEY2.
A URI construction device applied to a sending end, and is characterized in that it includes:

The key field extraction module is used to extract the key fields in the target URI;

An encryption module for encrypting the key field, and the encrypted key field is encoded to generate a first character string;

An encrypted URI generating module, configured to generate an encrypted URI based on the first character string;

The sending module is used to send the encrypted URI.
The URI construction device according to claim 8, wherein the encryption module generating the first character string comprises:

Based on the pre-defined first serial number KEY1, the second serial number KEY2 is obtained after calculation according to a predetermined algorithm;

Based on the second serial number KEY2, an encryption operation is performed on the key field, and a first character string is generated after encoding.
9. The URI construction device according to claim 9, wherein the second sequence number KEY2 obtained after the operation according to a predetermined algorithm based on the pre-defined first sequence number KEY1 comprises:

Calculate the first serial number KEY1 according to a predetermined algorithm to obtain the second serial number KEY2;

Alternatively, a random number is generated by a random number generator or a time stamp, and after the random number is spliced with the first serial number KEY1, a predetermined algorithm is used to obtain the second serial number KEY2.
The URI construction device according to claim 9, wherein:

The encryption module is also used to generate a second character string after encoding the random value;

The generating an encrypted URI based on the first character string includes:

When the first serial number KEY1 is calculated according to a predetermined algorithm to obtain the second serial number KEY2, the remaining fields after the key fields are extracted from the first character string and the target URI are spliced according to preset rules Or insert specific fields after splicing according to preset rules to form an encrypted URI;

When the random value is spliced with the first serial number KEY1, and the second serial number KEY2 is obtained according to a predetermined algorithm, the first character string, the second character string, and the target After the URI extracts the key fields, the remaining fields are spliced according to preset rules or specific fields are inserted after splicing according to preset rules to form an encrypted URI.
A URI construction device applied to the receiving end, characterized in that it includes:

The receiving module is used to receive encrypted URI requests;

A character string extraction module, which extracts the first character string;

A decryption module to decrypt the first character string to obtain a key field;

The restoration module is configured to replace the first encrypted character string in the encrypted URI with the key field, and restore the encrypted URI to the target URI.
The URI construction device according to claim 12, wherein said decrypting said first character string to obtain the original key field comprises:

Decode the first character string to obtain an encrypted key field;

Based on the pre-defined first serial number KEY1, the second serial number KEY2 is obtained after calculation according to a predetermined algorithm;

Based on the second serial number KEY2, a decryption operation is performed on the encrypted key field to obtain the key field.
The URI construction device according to claim 13, wherein when the encrypted URI request only includes the first character string, the second sequence is obtained based on the pre-defined first sequence number KEY1 and calculated according to a predetermined algorithm. The number KEY2 includes: performing operations on the pre-defined first serial number KEY1 according to a predetermined algorithm to obtain the second serial number KEY2;

When the encrypted URI request includes the first character string and the second character string, the second sequence number KEY2 obtained after the operation according to a predetermined algorithm based on the predefined first sequence number KEY1 includes: A random value is obtained after decoding, and after the random value is spliced with the first serial number KEY1, and after a predetermined algorithm is calculated, the second serial number KEY2 is obtained.
A computer-readable storage medium having a computer program stored thereon, wherein the computer program implements the steps of the method according to any one of claims 1-7 when the computer program is executed.
A computer device, comprising a processor, a memory, and a computer program stored on the memory, wherein the processor implements the method according to any one of claims 1-7 when the processor executes the computer program step.