CN103561040A - File downloading method and system - Google Patents

Abstract

The invention discloses a file download method and system. The method includes: returning the user file download page through HTTPS, the file download page includes a temporary download address of the file, a download agent and a token TOKEN, and the download agent is used to intercept the user-initiated Temporary download address request, encrypt the timestamp and URL parameters in the temporary download address based on TOKEN, obtain the verification value and add it to the URL request, and construct the actual download address of the file; through the file identification and time in the URL request parameters Get the TOKEN and the comparison timestamp, generate a verification value based on TOKEN encryption, compare it with the verification value in the request URL, and finally generate a comparison result; provide specific file download services based on the comparison result. The system includes: a download agent generation module, a download verification service module and a download data service module. The invention can prevent the file download address from being leaked, and guarantee the downloading of legal users.

Description

A file download method and system

technical field

The present invention relates to the field of network data transmission, in particular to a file download method and system

Background technique

With the development of the application store model, more and more application stores have begun to appear. The protection of paid applications in the application store has become an important research content.

At present, for the download of paid application files, the design method is mainly to generate a download address on the server side after the user's payment is completed, and guide the client to redirect to obtain the download address for downloading. This method presents the download address directly to the user, which is easily intercepted by a third party and damages the interests of the developer.

Contents of the invention

The purpose of the present invention is to provide a method that can prevent the file download address from being intercepted by a third party, so as to protect the interests of developers.

In order to achieve the above object, on the one hand, the present invention provides a method for downloading files, the method comprising the following steps:

Return the file download page to the user through HTTPS, the file download page includes the temporary download address of the file, the download agent and the token TOKEN, and the download agent is used to intercept the temporary download address request initiated by the user, and based on the TOKEN for the temporary download address Encrypt the timestamp and URL parameters in the file, obtain the verification value and add it to the URL request, and construct the actual download address of the file;

Obtain the TOKEN and the comparison timestamp through the file ID and timestamp in the URL request parameter, generate a verification value based on TOKEN encryption, compare it with the verification value in the request URL, and finally generate the comparison result;

Provide specific file download services based on the comparison results, and control download task requests through session identifiers.

In another aspect, the present invention provides a file downloading system, the system comprising:

Download agent generation module, return file download page to user by HTTPS, described file download page includes the file temporary download address of generation, download agent and token TOKEN, and described download agent is used for intercepting temporary download address request, and based on token TOKEN encrypts the timestamp and URL parameters in the temporary download address, obtains the verification value and adds it to the URL request, and constructs the actual download address of the file;

Download the verification service module, obtain the TOKEN and the comparison time stamp through the file identifier and time stamp in the URL request parameter, generate a verification value based on TOKEN encryption, compare it with the verification value in the request URL, and finally generate the comparison result;

The download data service module is used to provide a specific file download service according to the comparison result of the download verification service module, and control the download task request through the session identifier.

The invention has the advantages of transmitting TOKEN and download agent program through HTTPS to prevent file download addresses from being intercepted, and at the same time controlling download task requests through session identifiers to ensure downloading by legal users.

Description of drawings

FIG. 1 is a structural block diagram of a paid application downloading system in an application store provided by an embodiment of the present invention;

FIG. 2 is a flowchart of a method for downloading paid applications in an application store provided by an embodiment of the present invention.

Detailed ways

The technical solutions of the present invention will be described in further detail below with reference to the accompanying drawings and embodiments.

FIG. 1 is a structural block diagram of a system for downloading paid applications in an application store provided by an embodiment of the present invention. As shown in FIG. 1 , the system includes an application mall portal 10 , a payment module 20 , a download proxy generation module 31 , a download verification service module 32 and a download data service module 33 .

The application store portal 10 provides users with browsing of application information and viewing of details, and is an entrance for application downloading.

The payment module 20 is used to complete the user's payment for the paid application.

The download proxy generation module 31 is used to return the file download page to the user by HTTPS, the file download page includes the file temporary download address, download proxy and token TOKEN generated, and the download proxy is used to intercept the temporary download address request, and based on the token TOKEN to The time stamp and URL parameters in the temporary download address are encrypted, and the verification value is obtained and added to the URL request to construct the actual download address of the file.

The download verification service module 32 is used to obtain the TOKEN and the comparison time stamp through the file identification and the time stamp in the URL request parameter, generate a verification value based on TOKEN encryption, compare it with the verification value in the request URL, and finally generate a comparison result.

Specifically, the download verification service module 32 obtains the request parameters in the URL by downloading the URL, and obtains the corresponding TOKEN according to the file identifier and time stamp in the request parameters; value, and compare it with the verification value in the URL. If they are inconsistent, return the download failure, otherwise, go to the next step; get the timestamp in the URL parameter, and judge whether the time exceeds the predetermined range. If it exceeds the predetermined range, then Return download failure, otherwise, go to the next step; according to the download request, generate a session ID for each verified download request, indicating that this task has been downloaded by a user.

The download data service module 33 is used to provide a specific file download service according to the comparison result of the download verification service module 32, and control the download task request through the session identifier.

Specifically, the download data service module 33 controls one TOKEN to have only one download task being executed at the same time according to the download session ID, and clears the session ID and TOKEN after the file download is completed.

FIG. 2 is a flowchart of a method for downloading paid applications in an application store provided by an embodiment of the present invention. As shown in Figure 2, the method steps are as follows:

Step 1. The user logs in to the application store portal and selects a paid application to download;

Step 2. The user accesses the payment platform through the HTTPS protocol and makes payment;

Step 3. After the payment is completed, generate TOKEN, time stamp and download agent through the download agent generation module, and make a one-to-one association between the file identification and time stamp and the TOKEN. At the same time, return to the download page, which contains the download agent and TOKEN, and the corresponding paid application download address on the page is a temporary download address. The temporary download address includes: user-defined protocol description and URL parameters. URL parameters include timestamps, file identifiers, and other relevant parameters;

Step 4. After the download page is loaded, start the download agent. The download agent listens to all temporary download address link requests, and encrypts the parameters of the link request through TOKEN to generate a verification value, which is added to the request URL;

Step 5, after receiving the URL request, the download verification service module parses out the file identification, timestamp, verification value and other parameters in the URL request parameters;

Step 6: The download verification service module sends the file identifier and time stamp to the download agent generation module, and obtains the TOKEN and compares the time stamp. The download agent generation module finds the TOKEN according to the corresponding relationship between the file identifier and the time stamp and the TOKEN, and compares whether the time stamp is within the preset time range, and returns the comparison result and the TOKEN to the download verification service module;

Step 7. The download verification service module obtains the timestamp comparison result. If it is not within the time range, the download request fails, otherwise, the obtained TOKEN is used to encrypt the URL according to the rules to generate a verification value, and the verification value in the request URL Value comparison, if inconsistent, return download request failure, otherwise, generate a session ID for the download request;

Step 8. The download data service module controls the download task request through the session identifier, so as to ensure that only one download task can be executed at the same time for one TOKEN.

The embodiment of the present invention transmits the TOKEN and the download agent program through HTTPS to prevent the download address from being intercepted, and at the same time, controls the download task request through the session identifier to ensure the download of legal users.

It should be noted that the method for downloading paid applications described in the embodiments of the present invention is not limited to application files, and is also applicable to other types of files on the Internet.

It will be apparent that many changes may be made to the invention described herein without departing from the true spirit and scope of the invention. Therefore, all changes obvious to those skilled in the art shall be included within the scope covered by the claims. The claimed scope of the present invention is limited only by the claims set forth.

Claims (7)

1. a document down loading method, is characterized in that:

By HTTPS, return to user file downloading page, the interim download address of described file downloading page include file, download agent and token TOKEN, described download agent is used for intercepting and capturing the interim download address request of Client-initiated, and based on TOKEN, the timestamp in interim download address and URL parameter are encrypted, obtain check value and add in URL request the actual download address of structure file to;

By the file identification in URL required parameter with timestamp obtains TOKEN and comparison time is stabbed, based on TOKEN, encrypt and generate check value, and the comparison of the check value in request URL, finally generate comparison result;

According to comparison result, provide concrete file download service.

2. method according to claim 1, its feature exists: the interim download address of described file comprises self-defining protocol fields and relevant parameter, and described content of parameter comprises: one or more in user ID, timestamp and file identification.

3. method according to claim 1, its feature exists: described by the file identification in URL required parameter with timestamp obtains TOKEN and comparison time is stabbed, based on TOKEN, encrypt and generate check value, and the comparison of the check value in request URL, finally generate comparison result step and comprise:

By download URL, obtain the required parameter in URL, according to the file identification in required parameter and timestamp, obtain corresponding TOKEN;

According to TOKEN, URL is generated to check value according to check value create-rule, and compare with the check value in URL, if inconsistent, return to failed download, otherwise, enter next step;

Obtain the timestamp in URL parameter, whether the time that judges surpasses predetermined scope, if surpass predetermined scope, returns to failed download, otherwise, enter next step;

According to download request, for each download request by checking generates a session identification, identify this task existing subscriber and downloading.

4. method according to claim 3, its feature exists: describedly according to comparison result, provide concrete file download service step to comprise:

According to session identification, controlling a TOKEN can only have a downloading task simultaneously carrying out, and after file has been downloaded, removes session identification and TOKEN.

5. a file download system, is characterized in that comprising:

Download agent generation module, by HTTPS, return to user file downloading page, the interim download address of file, download agent and token TOKEN that described file downloading page comprises generation, described download agent is used for intercepting and capturing interim download address request, and based on token TOKEN, the timestamp in interim download address and URL parameter are encrypted, obtain check value and add in URL request the actual download address of structure file to;

Download validate service module, by the file identification in URL required parameter with timestamp obtains TOKEN and comparison time is stabbed, based on TOKEN, encrypt and generate check value, and the comparison of the check value in request URL, comparison result finally generated;

Downloading data service module, for providing concrete file download service according to described download examination service module comparison result.

6. system according to claim 5, its feature exists: described download validate service module specifically for:

By download URL, obtain the required parameter in URL, according to the file identification in required parameter and timestamp, obtain corresponding TOKEN;

According to TOKEN, URL is generated to check value according to check value create-rule, and compare with the check value in URL, if inconsistent, return to failed download, otherwise, enter next step;

Obtain the timestamp in URL parameter, whether the time that judges surpasses predetermined scope, if surpass predetermined scope, returns to failed download, otherwise, enter next step;

According to download request, for each download request by checking generates a session identification, identify this task existing subscriber and downloading.

7. system according to claim 5, its feature exists: described downloading data service module specifically for:

According to download session sign, controlling a TOKEN can only have a downloading task simultaneously carrying out, and after file has been downloaded, removes session identification and TOKEN.

Images