CN107332821B - A method, device and server for realizing communication between client and server - Google Patents

Abstract

The invention discloses a method, a device and a server for realizing communication between a client and the server. The method comprises the following steps: judging whether a preset condition is met; if the preset condition is met, establishing connection with a server in an HTTP mode; when request data are sent to a server, encrypting request parameters in the request data according to a preset encryption algorithm to obtain a first check value, and sending the request data containing the request parameters and the first check value to the server through the established connection; and receiving response data corresponding to the request data returned by the server. Through the technical scheme, the communication process between the client and the server does not include a tls handshake process, the process is simple, the consumed time is short, the data transmission speed is high, the data response time is short, meanwhile, the safety and the integrity in the data transmission process can be ensured, and the user experience is enhanced.

Description

A method, device and server for realizing communication between client and server

technical field

The present invention relates to the field of computer technology, in particular to a method, device and server for realizing communication between a client and a server.

Background technique

With the continuous development of the functions of the intelligent terminal, various clients installed on the intelligent terminal also develop, and the client communicates with the server to meet the needs of users. In the prior art, the communication between the client and the server is generally through HTTPs (Hyper Text Transfer Protocol over SecureSocket Layer). As a security-oriented HTTPs, it includes the secure transport layer protocol tls, which is used to ensure the security and data integrity in the process of data transmission. The secure transport layer protocol tls mainly provides a secure connection through the tls handshake process. Therefore, in the process of establishing a connection in the HTTPs mode, in addition to the three-way handshake process of the transmission control protocol TCP, it also needs to go through the TLS handshake process, that is, the transmission process of a secret key. Therefore, if the communication between the client and the server is Using the HTTPs method, the process of establishing a tls handshake connection between the two is complicated and time-consuming, which affects the data transmission speed, especially for data that responds instantly, the transmission speed has a great impact on the response time of the data.

Therefore, using the HTTPs protocol for communication between the client and the server will have the following problems: the communication process is complicated and time-consuming, the data transmission speed is low, and the data response time is slow, which will reduce the user experience.

SUMMARY OF THE INVENTION

In view of the above problems, the present invention is proposed to provide a method, a corresponding device, and a server for realizing communication between a client and a server, which overcome the above problems or at least partially solve the above problems.

According to one aspect of the present invention, there is provided a method for realizing communication between a client and a server, the method comprising: judging whether a preset condition is met; if the preset condition is met, establishing a connection with the server by means of HTTP; When the server sends the request data, it encrypts the request parameters in the request data according to a preset encryption algorithm to obtain a first check value, and passes the request data including the request parameters and the first check value through the established The connection is sent to the server; the response data corresponding to the request data returned by the server is received.

Optionally, the method further includes: if the preset conditions are not satisfied, establishing a connection with the server by using HTTPS; when sending request data to the server, sending the request data to the server through the established connection; receiving the request data. response data corresponding to the request data returned by the server through the established connection.

Optionally, the performing encryption processing on the request parameters in the request data according to a preset encryption algorithm includes: obtaining a key pre-issued by the server, and using the key and according to a specified encryption algorithm to encrypt the request data in the request data. The request parameters are encrypted.

Optionally, the judging whether the preset condition is satisfied includes: judging whether the HTTP port of the server is available, and if it is available, the preset condition is satisfied.

Optionally, the judging whether the preset condition is satisfied includes: judging whether the currently accessed network is a secure network, and if it is determined that the preset condition is satisfied.

Optionally, the judging whether the currently accessed network is a secure network includes one or more of the following: judging whether the currently accessed network is a network of a mobile network operator, and if so, it is a secure network; judging the current Whether the accessed network matches the network in the preset safe network list, and if so, it is a safe network; it is judged whether the usage times of the currently accessed network is greater than the preset value, and if so, it is a safe network.

Optionally, the judging whether the preset condition is satisfied includes: judging whether the current operating system allows the request data to be sent to the HTTP port, and if so, the preset condition is satisfied.

Optionally, the judging whether the preset condition is satisfied includes: judging whether the instruction type of the request data to be sent is a low security requirement instruction, and if it is a low security requirement instruction, the preset condition is satisfied.

Optionally, the judging whether the instruction type of the request data to be sent is a low security requirement instruction includes: judging whether the instruction type of the request data to be sent matches the instruction type in the preset low security requirement instruction list, if it matches Then the command type of the request data to be sent is a low security requirement command.

According to another aspect of the present invention, a method for implementing communication between a client and a server is provided, comprising: establishing a connection with the client through an HTTP port; receiving request data including request parameters sent by the client through the HTTP port and the first check value; encrypt the request parameters in the request data according to a preset encryption algorithm to obtain a second check value; determine whether the first check value and the second check value are not If they are consistent, the response data corresponding to the request data is returned to the client through the HTTP port.

Optionally, the method further includes: establishing a connection with the client through an HTTPS port; receiving request data sent by the client through an HTTPS port; returning response data corresponding to the request data to the client through an HTTPS port. client.

Optionally, the performing encryption processing on the request parameters in the request data according to a preset encryption algorithm includes: using a specified key and according to a specified encryption algorithm to perform encryption processing on the request parameters in the request data; wherein, The designated key is a key delivered to the client.

According to another aspect of the present invention, there is provided an apparatus for realizing communication between a client and a server, the apparatus comprising: a judgment unit for judging whether a preset condition is satisfied; a connection unit for, if the preset condition is satisfied, The connection is established with the server by means of HTTP; the encryption processing unit is used to encrypt the request parameters in the request data according to the preset encryption algorithm when sending the request data to the server, so as to obtain the first check value; the sending unit , which is used to send the request data including the request parameters and the first check value to the server through the established connection; the receiving unit is used to receive the response data corresponding to the request data returned by the server.

Optionally, the connecting unit is configured to establish a connection with the server in an HTTPS mode if the preset condition is not satisfied; the sending unit is configured to send the request data to the server through the established The connection is sent to the server; the receiving unit is configured to receive the response data corresponding to the request data returned by the server through the established connection.

Optionally, the encryption processing unit is configured to obtain a key pre-issued by the server, and perform encryption processing on the request parameters in the request data by using the key and according to a specified encryption algorithm.

Optionally, the judging unit is configured to judge whether the HTTP port of the server is available, and if it is available, the preset condition is satisfied.

Optionally, the judging unit is configured to judge whether the currently accessed network is a secure network, and if it is judged to be a secure network, the preset condition is satisfied.

Optionally, the judging whether the currently accessed network is a secure network includes one or more of the following: judging whether the currently accessed network is a network of a mobile network operator, and if so, it is a secure network; judging the current Whether the accessed network matches the network in the preset safe network list, and if so, it is a safe network; it is judged whether the usage times of the currently accessed network is greater than the preset value, and if so, it is a safe network.

Optionally, the judging unit is configured to judge whether the current operating system allows sending request data to the HTTP port, and if so, the preset condition is satisfied.

Optionally, the judging unit is configured to judge whether the instruction type of the request data to be sent is an instruction with low security requirements, and if it is an instruction with low security requirements, the preset condition is satisfied.

Optionally, the judging unit is further used to judge whether the instruction type of the request data to be sent matches the instruction type in the preset low security requirement instruction list, and if it matches, the instruction type of the request data to be sent is low. Safety Requirements Directive.

According to yet another aspect of the present invention, a server is provided, comprising: a connection unit for establishing a connection with a client through an HTTP port; a receiving unit for receiving a request including request parameters sent by the client through the HTTP port data and a first check value; an encryption processing unit, used for encrypting the request parameters in the request data according to a preset encryption algorithm, to obtain a second check value; a judgment unit, used for judging the first check value Whether the check value and the second check value are consistent; the sending unit is configured to return the response data corresponding to the request data to the client through the HTTP port if they are consistent.

Optionally, the connecting unit is further configured to establish a connection with the client through the HTTPS port; the receiving unit is further configured to receive the request data sent by the client through the HTTPS port; the sending unit is configured with for returning the response data corresponding to the request data to the client through the HTTPS port.

Optionally, the encryption processing unit is configured to perform encryption processing on the request parameters in the request data by using a specified key and according to a specified encryption algorithm; wherein, the specified key is issued to the client. key.

According to the technical scheme of the present invention, the client first determines whether the preset conditions are met; if the preset conditions are met, it establishes a connection with the server by means of HTTP; at the same time, in order to ensure the security and integrity of the data, when sending the request data to the server , encrypt the request parameters in the request data according to the preset encryption algorithm, obtain the first check value, and send the request data including the request parameters and the first check value to the server through the established connection; when the server receives After the data is received and verified successfully, the corresponding response data will be returned, so that the client can receive the response data corresponding to the request data returned by the server in time. It can be seen that the communication process between the client and the server in this technical solution does not include the TLS handshake process, the process is simple, the time consuming is short, the data transmission speed is fast, the data response time is short, and the security and Integrity, enhancing the user experience.

The above description is only an overview of the technical solutions of the present invention, in order to be able to understand the technical means of the present invention more clearly, it can be implemented according to the content of the description, and in order to make the above and other purposes, features and advantages of the present invention more obvious and easy to understand , the following specific embodiments of the present invention are given.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiments. The drawings are for the purpose of illustrating preferred embodiments only and are not to be considered limiting of the invention. Also, the same components are denoted by the same reference numerals throughout the drawings. In the attached image:

1 shows a schematic flowchart of a method for implementing communication between a client and a server according to an embodiment of the present invention;

2 shows a schematic flowchart of a method for implementing communication between a client and a server according to another embodiment of the present invention;

3 shows a schematic structural diagram of an apparatus for implementing communication between a client and a server according to an embodiment of the present invention;

FIG. 4 shows a schematic structural diagram of a server according to an embodiment of the present invention.

Detailed ways

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided so that the present disclosure will be more thoroughly understood, and will fully convey the scope of the present disclosure to those skilled in the art.

FIG. 1 shows a schematic flowchart of a method for implementing communication between a client and a server according to an embodiment of the present invention, and the embodiment of the present invention is described from the client side. As shown in Figure 1, the method includes:

Step S110, judging whether the preset condition is satisfied.

Step S120, if the preset condition is satisfied, establish a connection with the server by means of HTTP.

In the prior art, usually by default, the communication between the client and the server adopts the HTTPs mode. To put it simply, the HTTPs here is a secure version of HTTP for the purpose of ensuring the security and integrity of the data. If the communication between the client and the server does not use HTTPs, but uses HTTP, that is, when the technical solution of this embodiment is used, in order to ensure the smooth implementation of the solution, it is necessary to first determine whether the preset conditions are satisfied, and only if the preset conditions are used If satisfied, the connection to the server can be established by means of HTTP. And, in the case that the request data needs to be responded to in time, in order to ensure that the data transmission can be completed in a relatively short time, it is necessary to first determine whether the preset conditions are satisfied, and after the preset conditions are satisfied, the technical solution of the present invention can be adopted. That is to say, the judgment of the preset condition can not only ensure the effective implementation of the solution, but also select an adaptive solution according to different scenarios.

Step S130, when sending the request data to the server, perform encryption processing on the request parameters in the request data according to a preset encryption algorithm, obtain a first check value, and pass the request data including the request parameters and the first check value through all the parameters. The established connection is sent to the server.

Because the connection between the client and the server in this embodiment is established through HTTP, the security and integrity of data transmitted in this way are poor. In order to make up for the security defect of HTTP, in this embodiment, the When the server sends the request data, it encrypts the request parameters in the request data according to the preset encryption algorithm, obtains the first check value, and sends the request data including the request parameters and the first check value to the The server, so that the server verifies the received request data according to the first verification value, and only after the verification is successful, will the response data corresponding to the request data be returned to the client. In this way, incomplete data caused by loss during data transmission is prevented, and data is prevented from being hijacked and tampered with during data transmission.

Step S140: Receive response data corresponding to the request data returned by the server.

It can be seen that the communication process between the client and the server in this technical solution adopts HTTP, excluding the TLS handshake process, the process is simple, time-consuming, data transmission speed is fast, data response time is short, and data transmission can also be guaranteed. Process security and integrity, enhancing the user experience.

By adopting the technical scheme of the present invention, it is first necessary to judge whether the preset conditions are satisfied, if not, the client cannot establish a connection with the server by means of HTTP. Therefore, in an embodiment of the present invention, the method shown in FIG. 1 further includes: if the preset condition is not satisfied, establishing a connection with the server by using HTTPS; when sending request data to the server, sending the request data through the established The connection is sent to the server; the response data corresponding to the request data returned by the server through the established connection is received.

In an embodiment of the present invention, performing encryption processing on the request parameters in the request data according to the preset encryption algorithm in step S130 includes: obtaining a key pre-issued by the server, using the key and encrypting the request data according to the specified encryption algorithm The request parameters in the request data are encrypted.

The encryption algorithm here can use the encryption algorithm in the prior art, such as MD5 algorithm or sha1 algorithm, which is not limited. It is necessary to ensure that the key and the specified encryption algorithm are consistent on the client side and the server side, so as to ensure that the server side can also The key can be used to encrypt the request parameters in the request data according to the specified encryption algorithm, and the received encrypted data can be verified. After the verification is successful, the request data can be determined to be safe and complete.

For example, the request data includes parameter 1, parameter 2, parameter 3, and parameter 4. Combine them and an acquired signature key (for example, a character string) into a signature string according to predetermined rules, and use the specified encryption algorithm MD5 algorithm. , calculate the signature string into an MD5 value and send it to the server. After the server receives the parameter 1, parameter 2, parameter 3, parameter 4 and MD5 value, the server also sends the parameter 1, parameter 2, parameter 3, parameter 4 and Its own signature key (for example, it can be a string) is spliced according to predetermined rules to generate a signature string, and an MD5 value calculation is performed, and then it is judged whether the received MD5 value is consistent with the MD5 value calculated by the server itself. If it is consistent, the request data is normal, if it is inconsistent, the request data is abnormal.

Those skilled in the art should understand that the client can obtain the signature key through various ways. For the sake of security, the client can use the https method when communicating with the server for the first time, and obtain the signature key in this communication mode, or obtain the signature key through a third-party encrypted transmission. Of course, the client can also obtain the signature key by using other security methods, and the present invention is not limited to this.

In the implementation of the technical solution of the present invention, it is necessary to first determine whether the preset conditions are satisfied, that is, whether the connection between the client and the server can be established by means of HTTP, and the data is transmitted by encrypting the data according to the encryption algorithm. Because, in practical applications, in some cases, the operating system of the smart terminal usually defaults that the connection between the client and the server is usually an HTTPs connection, while other connections are not supported or compatible; some In some cases, the HTTP port on the server side is unavailable; in some cases, the data transmission process is relatively secure; in other cases, the security requirements of the type of the requested data itself are low, so, in the present invention, on the one hand, When it is necessary to ensure the effective implementation of the scheme, it is necessary to judge whether the preset conditions are satisfied. On the other hand, it can also be selected according to the actual needs, whether to use the technical scheme of the present invention to further improve the user experience.

Hereinafter, different solutions for judging whether the preset conditions are satisfied will be described in detail through the following examples. It should be noted that the solutions in the following examples are only the commonly used preferred embodiments proposed by the present invention. The setting conditions can be set according to the needs.

Option One:

The judging whether the preset condition is satisfied in step S110 includes: judging whether the HTTP port of the server is available, if it is available, the preset condition is satisfied; if it is not available, it is determined that the preset condition is not satisfied.

Because no matter which method the client and server use to establish a connection, there is a port corresponding to the connection method to receive data. For example, the HTTP port is port 80, and the HTTPs port is port 443. Therefore, in this technical solution, in order to ensure the effective implementation of this solution, before the client and the server establish a connection through HTTP, it is necessary to determine that the server can receive the request data, that is, the corresponding port 80 on the server side is available.

In one embodiment, the relevant interface information may be acquired through the first communication between the client and the server. Specifically, the client can use the https method when communicating with the server for the first time, and obtain corresponding port information (such as whether port 80 is available, etc.) in this communication mode. In another embodiment, the specific determination process may be that the client may first send data transmitted through HTTP to the server, and if the client can receive correct response data, it is determined that the HTTP port of the server is available, Otherwise it is unavailable. After the judgment is performed, the client may mark the server's HTTP port as available. When data transmission is performed again, the judgment of this step can be saved, and to a certain extent, the data transmission speed can be improved.

It should be understood by those skilled in the art that the current availability of the corresponding port can also be accurately known by periodically acquiring port information (or sending data and judging the response), or after determining that data transmission/communication is required and determining the data transmission / The current availability of the response port is determined before the communication method, and the present invention is not limited to this.

Option II:

The judging whether the preset condition is satisfied in step S110 includes: judging whether the currently accessed network is a secure network, if it is judged to be a secure network, the preset condition is met; if it is not a secure network, it is determined that the preset condition is not met.

Because the connection established by HTTP is adopted in the technical solution of the present invention, plaintext transmission is still used in the data transmission process. If the current network is a non-secure network, illegal users may hijack and tamper with the plaintext of the data, resulting in data transmission. Insecurity, affecting the correctness and integrity of data. Therefore, in order to ensure that data is not hijacked during the implementation of the present invention, before establishing a connection between the client and the server through HTTP, it is necessary to first determine whether the network currently accessed by the client is a secure network.

Specifically, the above-mentioned judging whether the currently accessed network is a secure network includes one or more of the following:

(1) Determine whether the currently accessed network is a network of a mobile network operator, and if so, it is a secure network. For example, network operators such as China Mobile and China Unicom.

(2) Determine whether the currently accessed network matches the network in the preset safe network list, and if it matches, it is a safe network. For example, 4G network.

(3) Judging whether the usage times of the currently accessed network is greater than a preset value, and if so, it is a secure network.

The usage times of the network currently accessed here can be the usage times of the network by the smart terminal device where the current client is located. , the working local area network; it can be the number of times the network is used by a trusted device, where the trusted device can be set as a device that has certain requirements for the security of data transmission, for example, a device involved in personal payment.

third solution:

The judging whether the preset condition is satisfied in step S110 includes: judging whether the current operating system allows sending request data to the HTTP port, if so, the preset condition is met; if not, it is determined that the preset condition is not met.

To establish a connection using HTTP and send data successfully, it depends not only on whether the port on the server side is available, but also on whether the operating system in the smart terminal where the client is installed allows sending data to the HTTP port. For example, a particular version of a particular operating system may not allow communication using HTTP. Therefore, in order to ensure the effective implementation of this solution, it is necessary to determine whether the current operating system allows sending request data to the HTTP port.

Option four:

The judging whether the preset condition is satisfied in step S110 includes: judging whether the instruction type of the request data to be sent is a low security requirement instruction, and if it is a low security requirement instruction, the preset condition is satisfied.

An instruction with low security requirements shall refer to an instruction whose execution does not directly affect the security of the device responding to the requested data. For example, when a command instruction is sent to a corresponding device through a smart terminal, if the instruction type is to instruct the device to turn on/off, it can be considered that the type of the instruction has high security requirements, because the startup/shutdown directly involves the device Whether it can be used normally, if the instruction to perform a certain action is sent to the device, it can be considered that the instruction has low security requirements. For another example, when watching a video, turning on/off the light can also be regarded as a low-security command.

Specifically, a low security requirement instruction list can be preset according to requirements. The above-mentioned judging whether the instruction type of the request data to be sent is a low-security requirement instruction includes: judging whether the instruction type of the request data to be sent matches the instruction type in the preset low-security requirement instruction list, and if it matches, the request to be sent. The instruction type of the data is an instruction with low security requirements, that is, the preset condition is satisfied.

Option five:

Judging whether the preset condition is satisfied in step S110 includes: according to the instruction time limit of the request data to be sent, judging whether the instruction of the request data to be sent is a real-time instruction, if so, the instruction of the request data needs to be responded in real time, that is Preconditions are met.

Some instructions for requesting data will have a time stamp, and the response to the request data needs to be completed within the time indicated by the time stamp. If the time stamp is within the preset threshold, it is determined that the request data needs a real-time response, and it is determined that the preset condition is satisfied. , it is necessary to adopt the technical solution of the present invention which takes less time.

For example, if the preset threshold is 0.4ms, when a command instruction is sent to the corresponding device through the smart terminal, the time indicated by the timestamp is 0.2ms, which is less than the preset threshold of 0.4ms, then the command instruction is a real-time response instruction. If the device needs to execute the command instruction in real time, the connection between the client and the server of the intelligent terminal can be established by means of HTTP, and similarly, the connection between the device and the server can also be established by means of HTTP.

It should be noted that the above-mentioned solutions 1 to 5 may be implemented independently, or may be implemented in any combination, which is not specifically limited here.

FIG. 2 shows a schematic flowchart of a method for implementing communication between a client and a server according to another embodiment of the present invention. The embodiment of the present invention is described from the server side, and the implementation process is the same as that shown in FIG. 1 . corresponding to the process. As shown in Figure 2, the method includes:

Step S210, establishing a connection with the client through the HTTP port.

When the client determines that the preset condition is satisfied, it will establish a connection with the server through HTTP, and the server will establish a connection with the client through the HTTP port (ie, port 80).

Step S220: Receive request data including request parameters and a first check value sent by the client through the HTTP port.

When the client sends request data, it sends the request data to the HTTP port of the server. In this embodiment, the server receives the request data including the request parameters and the first check value sent by the client through the HTTP port.

Step S230: Encrypt the request parameters in the request data according to a preset encryption algorithm to obtain a second check value.

Step S240, determine whether the first check value and the second check value are consistent, and if they are consistent, return response data corresponding to the request data to the client through the HTTP port.

As explained above, the server's key and the specified encryption algorithm are the same as the client's key and encryption algorithm. After the server receives the request data including the request parameters and the first check value, it encrypts the request parameters in the request data according to the preset encryption algorithm to obtain the second check value. If the request data is normal, then The first check value and the second check value are the same; if the request data is abnormal, the first check value and the second check value are different. By judging whether the first check value and the second check value are consistent, it can be judged whether the request data is normal. If the judgment is consistent, the server returns the response data corresponding to the request data to the client through the HTTP port; if the judgment is inconsistent, the response data will not be returned.

When the client side determines that the preset conditions are not satisfied, the client needs to establish a connection with the server through HTTPs. Therefore, in an embodiment of the present invention, the method shown in FIG. 2 further includes: establishing a connection with the client through the HTTPS port; receiving request data sent by the client through the HTTPS port; passing the response data corresponding to the request data through the HTTPS port returned to the client.

In an embodiment of the present invention, performing encryption processing on the request parameters in the request data according to a preset encryption algorithm in step S230 includes: using a specified key and performing encryption processing on the request parameters in the request data according to the specified encryption algorithm ; where the specified key is the key delivered to the client.

Fig. 3 shows a schematic structural diagram of an apparatus for implementing communication between a client and a server according to an embodiment of the present invention. As shown in FIG. 3, the apparatus 300 for realizing communication between a client and a server includes:

The judgment unit 310 is used for judging whether the preset condition is satisfied.

The connection unit 320 is configured to establish a connection with the server by means of HTTP if the preset condition is satisfied.

In the prior art, usually by default, the communication between the client and the server adopts the HTTPs mode. To put it simply, the HTTPs here is a secure version of HTTP for the purpose of ensuring the security and integrity of the data. If the communication between the client and the server does not use HTTPs, but uses HTTP, that is, when the technical solution of this embodiment is used, in order to ensure the smooth implementation of the solution, it is necessary to first determine whether the preset conditions are satisfied, and only if the preset conditions are used If satisfied, the connection to the server can be established by means of HTTP. And, in the case that the request data needs to be responded to in time, in order to ensure that the data transmission can be completed in a relatively short time, it is necessary to first determine whether the preset conditions are satisfied, and after the preset conditions are satisfied, the technical solution of the present invention can be adopted. That is to say, the judgment of the preset condition can not only ensure the effective implementation of the solution, but also select an adaptive solution according to different scenarios.

The encryption processing unit 330 is configured to perform encryption processing on request parameters in the request data according to a preset encryption algorithm to obtain a first check value when the request data is sent to the server.

The sending unit 340 is configured to send the request data including the request parameter and the first check value to the server through the established connection.

Because the connection between the client and the server in this embodiment is established through HTTP, the security and integrity of data transmitted in this way are poor. In order to make up for the security defect of HTTP, in this embodiment, the When the server sends the request data, it encrypts the request parameters in the request data according to the preset encryption algorithm, obtains the first check value, and sends the request data including the request parameters and the first check value to the The server, so that the server verifies the received request data according to the first verification value, and only after the verification is successful, will the response data corresponding to the request data be returned to the client. In this way, incomplete data caused by loss during data transmission is prevented, and data is prevented from being hijacked and tampered with during data transmission.

The receiving unit 350 is configured to receive response data corresponding to the request data returned by the server.

It can be seen that the communication process between the client and the server in this technical solution adopts HTTP, excluding the TLS handshake process, the process is simple, time-consuming, data transmission speed is fast, data response time is short, and data transmission can also be guaranteed. Process security and integrity, enhancing the user experience.

By adopting the technical scheme of the present invention, it is first necessary to judge whether the preset conditions are satisfied, if not, the client cannot establish a connection with the server by means of HTTP. Therefore, in an embodiment of the present invention, the connecting unit 320 is configured to establish a connection with the server by using HTTPS if the preset conditions are not satisfied; the sending unit 340 is configured to send the request data to the server when sending the request data to the server. It is sent to the server through the established connection; the receiving unit 350 is configured to receive the response data corresponding to the request data returned by the server through the established connection.

In an embodiment of the present invention, the encryption processing unit 330 is configured to obtain a key pre-issued by the server, and perform encryption processing on request parameters in the request data by using the key and according to a specified encryption algorithm.

The encryption algorithm here can use the encryption algorithm in the prior art, such as MD5 algorithm or sha1 algorithm, which is not limited. It is necessary to ensure that the key and the specified encryption algorithm are consistent on the client side and the server side, so as to ensure that the server side can also The key can be used to encrypt the request parameters in the request data according to the specified encryption algorithm, and the received encrypted data can be verified. After the verification is successful, the request data can be determined to be safe and complete.

For example, the request data includes parameter 1, parameter 2, parameter 3, and parameter 4. Combine them and an acquired signature key (for example, a character string) into a signature string according to predetermined rules, and use the specified encryption algorithm MD5 algorithm. , calculate the signature string into an MD5 value and send it to the server. After the server receives the parameter 1, parameter 2, parameter 3, parameter 4 and MD5 value, the server also sends the parameter 1, parameter 2, parameter 3, parameter 4 and Its own signature key (for example, it can be a string) is spliced according to predetermined rules to generate a signature string, and an MD5 value calculation is performed, and then it is judged whether the received MD5 value is consistent with the MD5 value calculated by the server itself. If it is consistent, the request data is normal, if it is inconsistent, the request data is abnormal.

Those skilled in the art should understand that the client can obtain the signature key through various ways. For the sake of security, the client can use the https method when communicating with the server for the first time, and obtain the signature key in this communication mode, or obtain the signature key through a third-party encrypted transmission. Of course, the client can also obtain the signature key by using other security methods, and the present invention is not limited to this.

In the implementation of the technical solution of the present invention, it is necessary to first determine whether the preset conditions are satisfied, that is, whether the connection between the client and the server can be established by means of HTTP, and the data is transmitted by encrypting the data according to the encryption algorithm. Because, in practical applications, in some cases, the operating system of the smart terminal usually defaults that the connection between the client and the server is usually an HTTPs connection, while other connections are not supported or compatible; some In some cases, the HTTP port on the server side is unavailable; in some cases, the data transmission process is relatively secure; in other cases, the security requirements of the type of the requested data itself are low, so, in the present invention, on the one hand, When it is necessary to ensure the effective implementation of the scheme, it is necessary to judge whether the preset conditions are satisfied. On the other hand, it can also be selected according to the actual needs, whether to use the technical scheme of the present invention to further improve the user experience.

Hereinafter, different solutions for judging whether the preset conditions are satisfied will be described in detail through the following examples. It should be noted that the solutions in the following examples are only the commonly used preferred embodiments proposed by the present invention. The setting conditions can be set according to the needs.

Option One:

The judging unit 310 is configured to judge whether the HTTP port of the server is available, and if it is available, the preset condition is satisfied; if it is not available, it is determined that the preset condition is not satisfied.

Because no matter which method the client and server use to establish a connection, there is a port corresponding to the connection method to receive data. For example, the HTTP port is port 80, and the HTTPs port is port 443. Therefore, in this technical solution, in order to ensure the effective implementation of this solution, before the client and the server establish a connection through HTTP, it is necessary to determine that the server can receive the request data, that is, the corresponding port 80 on the server side is available.

In one embodiment, the relevant interface information may be acquired through the first communication between the client and the server. Specifically, the client can use the https method when communicating with the server for the first time, and obtain corresponding port information (such as whether port 80 is available, etc.) in this communication mode. In another embodiment, the specific determination process may be that the client may first send data transmitted through HTTP to the server, and if the client can receive correct response data, it is determined that the HTTP port of the server is available, Otherwise it is unavailable. After the judgment is performed, the client can mark the HTTP port of the server as available. When data transmission is performed again, the judgment of this step can be saved, and to a certain extent, the data transmission speed can be improved.

It should be understood by those skilled in the art that the current availability of the corresponding port can also be accurately known by periodically acquiring port information (or sending data and judging the response), or after determining that data transmission/communication is required and determining the data transmission / The current availability of the response port is determined before the communication method, and the present invention is not limited to this.

Option II:

The judging unit 310 is configured to judge whether the currently accessed network is a secure network, if it is judged to be a secure network, the preset condition is satisfied; if it is not a secure network, it is determined that the preset condition is not met.

Because the connection established by HTTP is adopted in the technical solution of the present invention, plaintext transmission is still used in the data transmission process. If the current network is a non-secure network, illegal users may hijack and tamper with the plaintext of the data, resulting in data transmission. Insecurity, affecting the correctness and integrity of data. Therefore, in order to ensure that data is not hijacked during the implementation of the present invention, before establishing a connection between the client and the server through HTTP, it is necessary to first determine whether the network currently accessed by the client is a secure network.

Specifically, the above-mentioned judging whether the currently accessed network is a secure network includes one or more of the following:

(1) Determine whether the currently accessed network is a network of a mobile network operator, and if so, it is a secure network. For example, network operators such as China Mobile and China Unicom.

(2) Determine whether the currently accessed network matches the network in the preset safe network list, and if it matches, it is a safe network. For example, 4G network.

(3) Judging whether the usage times of the currently accessed network is greater than a preset value, and if so, it is a secure network.

The usage times of the network currently accessed here can be the usage times of the network by the smart terminal device where the current client is located. , the working local area network; it can be the number of times the network is used by a trusted device, where the trusted device can be set as a device that has certain requirements for the security of data transmission, for example, a device involved in personal payment.

third solution:

The judgment unit 310 is configured to judge whether the current operating system allows sending request data to the HTTP port, if so, the preset condition is satisfied; if not, it is determined that the preset condition is not met.

To establish a connection using HTTP and send data successfully, it depends not only on whether the port on the server side is available, but also on whether the operating system in the smart terminal where the client is installed allows sending data to the HTTP port. For example, a particular version of a particular operating system may not allow communication using HTTP. Therefore, in order to ensure the effective implementation of this solution, it is necessary to determine whether the current operating system allows sending request data to the HTTP port.

Option four:

The judgment unit 310 is used for judging whether the instruction type of the request data to be sent is a low-security-requirement instruction, and if it is a low-security-requirement instruction, the preset condition satisfying the low-security-requirement instruction should refer to the execution of the instruction to the response to the request data. Directives that do not have a direct impact on the safety of equipment. For example, when a command instruction is sent to a corresponding device through a smart terminal, if the instruction type is to indicate the power-on/shutdown of the device, it can be considered that the type of the instruction has high security requirements, because the power-on/shutdown directly involves the device Whether it can be used normally, if the instruction to perform a certain action is sent to the device, it can be considered that the instruction has low security requirements. For another example, when watching a video, turning on/off the light can also be regarded as a low-security command.

Specifically, a low security requirement instruction list can be preset according to requirements. Then judging unit 310 is further used for judging whether the instruction type of the request data to be sent matches the instruction type in the preset low-security requirement instruction list, and if it matches, the instruction type of the request data to be sent is a low-security requirement instruction, That is, the preset condition is satisfied.

Option five:

Judging whether the preset condition is satisfied in step S110 includes: according to the instruction time limit of the request data to be sent, judging whether the instruction of the request data to be sent is a real-time instruction, if so, the instruction of the request data needs to be responded in real time, that is The preset conditions are met.

Some instructions for requesting data will have a time stamp, and the response to the request data needs to be completed within the time indicated by the time stamp. If the time stamp is within the preset threshold, it is determined that the request data needs a real-time response, and it is determined that the preset condition is satisfied. , it is necessary to adopt the technical solution of the present invention which takes less time.

For example, if the preset threshold is 0.4ms, when a command instruction is sent to the corresponding device through the smart terminal, the time indicated by the timestamp is 0.2ms, which is less than the preset threshold of 0.4ms, then the command instruction is a real-time response instruction. If the device needs to execute the command instruction in real time, the connection between the client and the server of the intelligent terminal can be established by means of HTTP, and similarly, the connection between the device and the server can also be established by means of HTTP.

It should be noted that the above-mentioned solutions 1 to 5 may be implemented independently, or may be implemented in any combination, which is not specifically limited here.

FIG. 4 shows a schematic structural diagram of a server according to an embodiment of the present invention, and the implementation process thereof corresponds to the implementation process of the apparatus for implementing communication between a client and a server shown in FIG. 3 . As shown in Figure 4, the server 400 includes:

The connection unit 410 is configured to establish a connection with the client through the HTTP port.

When the client determines that the preset condition is satisfied, it will establish a connection with the server through HTTP, and the server will establish a connection with the client through the HTTP port (ie, port 80).

The receiving unit 420 is configured to receive the request data including the request parameters and the first check value sent by the client through the HTTP port.

When the client sends request data, it sends the request data to the HTTP port of the server. In this embodiment, the server receives the request data including the request parameters and the first check value sent by the client through the HTTP port.

The encryption processing unit 430 is configured to perform encryption processing on the request parameters in the request data according to a preset encryption algorithm to obtain a second check value.

The judgment unit 440 is configured to judge whether the first check value and the second check value are consistent.

The sending unit 450 is configured to return the response data corresponding to the request data to the client through the HTTP port if they are consistent.

As explained above, the server's key and the specified encryption algorithm are the same as the client's key and encryption algorithm. After the server receives the request data including the request parameters and the first check value, it encrypts the request parameters in the request data according to the preset encryption algorithm to obtain the second check value. If the request data is normal, then The first check value and the second check value are the same; if the request data is abnormal, the first check value and the second check value are different. By judging whether the first check value and the second check value are consistent, it can be judged whether the request data is normal. If the judgment is consistent, the server returns the response data corresponding to the request data to the client through the HTTP port; if the judgment is inconsistent, the response data will not be returned.

When the client side determines that the preset conditions are not satisfied, the client needs to establish a connection with the server through HTTPs. Therefore, in an embodiment of the present invention, the connecting unit 410 is further configured to establish a connection with the client through the HTTPS port; the receiving unit 420 is further configured to receive request data sent by the client through the HTTPS port; the sending unit 450 is configured to use It is used to return the response data corresponding to the request data to the client through the HTTPS port.

In an embodiment of the present invention, the encryption processing unit 430 is configured to perform encryption processing on request parameters in the request data by using a specified key and according to a specified encryption algorithm; wherein the specified key is a key issued to the client .

To sum up, according to the technical solution of the present invention, the client first determines whether the preset conditions are met; if the preset conditions are met, it establishes a connection with the server by means of HTTP; at the same time, in order to ensure the security and integrity of data, when the When the server sends the request data, it encrypts the request parameters in the request data according to the preset encryption algorithm, obtains the first check value, and sends the request data including the request parameters and the first check value to the Server; when the server receives the data and the verification is successful, it will return the corresponding response data, so that the client can receive the response data corresponding to the request data returned by the server in time. It can be seen that the communication process between the client and the server in this technical solution does not include the TLS handshake process, the process is simple, the time consuming is short, the data transmission speed is fast, the data response time is short, and the security and Integrity, enhancing the user experience.

It should be noted:

The algorithms and displays provided herein are not inherently related to any particular computer, virtual appliance, or other device. Various general-purpose devices can also be used with the teachings based on this. The structure required to construct such a device is apparent from the above description. Furthermore, the present invention is not directed to any particular programming language. It is to be understood that various programming languages may be used to implement the inventions described herein, and that the descriptions of specific languages above are intended to disclose the best mode for carrying out the invention.

In the description provided herein, numerous specific details are set forth. It will be understood, however, that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure an understanding of this description.

Similarly, it is to be understood that in the above description of exemplary embodiments of the invention, various features of the invention are sometimes grouped together into a single embodiment, figure, or its description. This disclosure, however, should not be construed as reflecting an intention that the invention as claimed requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art will understand that the modules in the device in the embodiment can be adaptively changed and arranged in one or more devices different from the embodiment. The modules or units or components in the embodiments may be combined into one module or unit or component, and further they may be divided into multiple sub-modules or sub-units or sub-assemblies. All features disclosed in this specification (including accompanying claims, abstract and drawings) and any method so disclosed may be employed in any combination, unless at least some of such features and/or procedures or elements are mutually exclusive. All processes or units of equipment are combined. Each feature disclosed in this specification (including accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will appreciate that although some of the embodiments described herein include certain features, but not others, included in other embodiments, that combinations of features of different embodiments are intended to be within the scope of the invention within and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

Various component embodiments of the present invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art should understand that a microprocessor or a digital signal processor (DSP) may be used in practice to implement the apparatus for implementing communication between the client and the server and some or all of the components in the server according to the embodiments of the present invention some or all of the functions. The present invention can also be implemented as apparatus or apparatus programs (eg, computer programs and computer program products) for performing part or all of the methods described herein. Such a program implementing the present invention may be stored on a computer-readable medium, or may be in the form of one or more signals. Such signals may be downloaded from Internet sites, or provided on carrier signals, or in any other form.

It should be noted that the above-described embodiments illustrate rather than limit the invention, and that alternative embodiments may be devised by those skilled in the art without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several different elements and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means may be embodied by one and the same item of hardware. The use of the words first, second, and third, etc. do not denote any order. These words can be interpreted as names.

The present invention discloses A1, a method for realizing communication between a client and a server, comprising:

Determine whether the preset conditions are met;

If the preset conditions are met, the connection is established with the server by means of HTTP;

When the request data is sent to the server, the request parameters in the request data are encrypted according to the preset encryption algorithm to obtain a first check value, and the request data including the request parameters and the first check value are passed through The established connection is sent to the server;

Receive response data corresponding to the request data returned by the server.

A2. The method of A1, further comprising:

If the preset conditions are not met, use HTTPS to establish a connection with the server;

When sending request data to the server, sending the request data to the server through the established connection;

Receive response data corresponding to the request data returned by the server through the established connection.

A3. The method of A1, wherein the encrypting the request parameters in the request data according to a preset encryption algorithm includes:

The key pre-issued by the server is obtained, and the request parameter in the request data is encrypted by using the key and according to the specified encryption algorithm.

A4. The method according to A1 or A2, wherein the judging whether the preset condition is satisfied includes:

Determine whether the HTTP port of the server is available, if available, the preset conditions are met.

A5. The method according to A1 or A2, wherein the judging whether the preset condition is satisfied includes:

It is determined whether the currently accessed network is a secure network, and if it is determined to be a secure network, the preset condition is satisfied.

A6. The method according to A5, wherein the judging whether the currently accessed network is a secure network includes one or more of the following:

Determine whether the currently accessed network is the network of the mobile network operator, and if so, it is a secure network;

Determine whether the currently accessed network matches the network in the preset safe network list, and if it matches, it is a safe network;

It is judged whether the usage times of the currently accessed network is greater than the preset value, and if so, it is a secure network.

A7. The method according to A1 or A2, wherein the judging whether the preset condition is satisfied includes:

Determines whether the current operating system allows sending request data to the HTTP port, and if so, the preset conditions are met.

A8. The method according to A1 or A2, wherein the judging whether the preset condition is satisfied includes:

It is judged whether the command type of the request data to be sent is a low security requirement command, and if it is a low security requirement command, the preset condition is satisfied.

A9. The method according to A8, wherein the judging whether the instruction type of the request data to be sent is an instruction with low security requirements includes:

It is judged whether the command type of the request data to be sent matches the command type in the preset low security requirement command list, and if it matches, the command type of the request data to be sent is a low security requirement command.

The invention also discloses B10, a method for realizing communication between the client and the server, comprising:

Establish a connection with the client through the HTTP port;

Receive through the HTTP port the request data and the first check value including the request parameters and sent by the client;

Encrypting the request parameters in the request data according to a preset encryption algorithm to obtain a second check value;

It is judged whether the first check value and the second check value are consistent, and if they are consistent, the response data corresponding to the request data is returned to the client through the HTTP port.

B11. The method of B10, further comprising:

establish a connection with the client through the HTTPS port;

Receive the request data sent by the client through the HTTPS port;

The response data corresponding to the request data is returned to the client through the HTTPS port.

B12. The method according to B10 or B11, wherein the encrypting the request parameters in the request data according to a preset encryption algorithm includes:

Encrypt the request parameters in the request data using the specified key and according to the specified encryption algorithm;

Wherein, the designated key is a key delivered to the client.

The invention also discloses C13, a device for realizing communication between the client and the server, the device comprising:

a judging unit for judging whether a preset condition is satisfied;

The connection unit is used to establish a connection with the server by means of HTTP if the preset condition is satisfied;

an encryption processing unit, configured to perform encryption processing on the request parameters in the request data according to a preset encryption algorithm when the request data is sent to the server to obtain a first check value;

a sending unit, configured to send the request data including the request parameter and the first check value to the server through the established connection;

A receiving unit, configured to receive response data corresponding to the request data returned by the server.

C14. The apparatus of C13, wherein,

The connection unit is configured to establish a connection with the server in an HTTPS manner if the preset condition is not satisfied;

The sending unit is configured to send the request data to the server through the established connection when sending the request data to the server;

The receiving unit is configured to receive response data corresponding to the request data returned by the server through the established connection.

C15. The apparatus of C13, wherein,

The encryption processing unit is configured to obtain a key pre-issued by the server, and perform encryption processing on the request parameters in the request data by using the key and according to a specified encryption algorithm.

C16. The apparatus of C13 or C14, wherein,

The judging unit is used for judging whether the HTTP port of the server is available, and if it is available, the preset condition is satisfied.

C17. The apparatus of C13 or C14, wherein,

The judging unit is configured to judge whether the currently accessed network is a secure network, and if it is judged to be a secure network, the preset condition is satisfied.

C18. The apparatus according to C17, wherein the determining whether the currently accessed network is a secure network includes one or more of the following:

Determine whether the currently accessed network is the network of the mobile network operator, and if so, it is a secure network;

Determine whether the currently accessed network matches the network in the preset safe network list, and if it matches, it is a safe network;

It is judged whether the usage times of the currently accessed network is greater than the preset value, and if so, it is a secure network.

C19. The apparatus of C13 or C14, wherein,

The judging unit is used for judging whether the current operating system allows sending request data to the HTTP port, and if so, the preset condition is satisfied.

C20. The apparatus of C13 or C14, wherein,

The judging unit is configured to judge whether the instruction type of the request data to be sent is an instruction with low security requirements, and if it is an instruction with low security requirements, the preset condition is satisfied.

C21. The device of C20, wherein,

The judging unit is further configured to judge whether the command type of the request data to be sent matches the command type in the preset low security requirement command list, and if it matches, the command type of the request data to be sent is a low security requirement command.

The invention discloses D22, a server, comprising:

The connection unit is used to establish a connection with the client through the HTTP port;

a receiving unit, configured to receive, through the HTTP port, the request data and the first check value including the request parameters sent by the client;

an encryption processing unit, configured to perform encryption processing on the request parameters in the request data according to a preset encryption algorithm to obtain a second check value;

a judging unit for judging whether the first check value and the second check value are consistent;

A sending unit, configured to return the response data corresponding to the request data to the client through the HTTP port if they are consistent.

D23. The server according to D22, wherein,

The connection unit is further configured to establish a connection with the client through the HTTPS port;

The receiving unit is further configured to receive the request data sent by the client through the HTTPS port;

The sending unit is configured to return the response data corresponding to the request data to the client through the HTTPS port.

D24. The server of D22 or D23, wherein,

The encryption processing unit is configured to perform encryption processing on the request parameters in the request data using a specified key and according to a specified encryption algorithm;

Wherein, the designated key is a key delivered to the client.

Claims (16)

1. A method for realizing communication between a client and a server, comprising: Judging whether the preset conditions are satisfied; the judging whether the preset conditions are satisfied includes: judging whether the currently accessed network is a secure network, and if it is judged that it is a secure network, the preset conditions are satisfied; If the preset conditions are met, the connection is established with the server by means of HTTP; When the request data is sent to the server, the request parameters in the request data are encrypted according to the preset encryption algorithm to obtain a first check value, and the request data including the request parameters and the first check value are passed through The established connection is sent to the server; receiving response data corresponding to the request data returned by the server; If the preset conditions are not met, use HTTPS to establish a connection with the server; When sending request data to the server, sending the request data to the server through the established connection; receiving response data corresponding to the request data returned by the server through the established connection; The judging whether the preset condition is satisfied includes: Determine whether the instruction type of the request data to be sent is a low-security-requirement instruction, and if it is a low-security-requirement instruction, the preset condition is satisfied; The judging whether the instruction type of the request data to be sent is a low security requirement instruction includes: It is judged whether the command type of the request data to be sent matches the command type in the preset low security requirement command list, and if it matches, the command type of the request data to be sent is a low security requirement command. 2. The method according to claim 1, wherein said performing encryption processing on the request parameters in the request data according to a preset encryption algorithm comprises: The key pre-issued by the server is obtained, and the request parameter in the request data is encrypted by using the key and according to the specified encryption algorithm. 3. The method of claim 1, wherein the judging whether the preset condition is satisfied comprises: Determine whether the HTTP port of the server is available, if available, the preset conditions are met. 4. The method according to claim 3, wherein the judging whether the currently accessed network is a secure network comprises one or more of the following: Determine whether the currently accessed network is the network of the mobile network operator, and if so, it is a secure network; Determine whether the currently accessed network matches the network in the preset safe network list, and if it matches, it is a safe network; It is judged whether the usage times of the currently accessed network is greater than the preset value, and if so, it is a secure network. 5. The method of claim 1, wherein the judging whether the preset condition is satisfied comprises: Determines whether the current operating system allows sending request data to the HTTP port, and if so, the preset conditions are met. 6. A method for realizing communication between a client and a server, comprising: Establish a connection with the client through the HTTP port; Receive through the HTTP port the request data and the first check value including the request parameters and sent by the client; Encrypting the request parameters in the request data according to a preset encryption algorithm to obtain a second check value; Determine whether the first check value and the second check value are consistent, and if they are consistent, return the response data corresponding to the request data to the client through the HTTP port; establish a connection with the client through the HTTPS port; Receive the request data sent by the client through the HTTPS port; The response data corresponding to the request data is returned to the client through the HTTPS port. 7. The method according to claim 6, wherein said performing encryption processing on the request parameters in the request data according to a preset encryption algorithm comprises: Encrypt the request parameters in the request data using the specified key and according to the specified encryption algorithm; Wherein, the designated key is a key delivered to the client. 8. A device for realizing communication between a client and a server, the device comprising: a judging unit for judging whether a preset condition is met; judging whether the currently accessed network is a secure network, and if it is judged to be a secure network, the preset condition is met; The connection unit is used to establish a connection with the server by means of HTTP if the preset condition is satisfied; an encryption processing unit, configured to perform encryption processing on the request parameters in the request data according to a preset encryption algorithm when the request data is sent to the server to obtain a first check value; a sending unit, configured to send the request data including the request parameter and the first check value to the server through the established connection; a receiving unit, configured to receive response data corresponding to the request data returned by the server; The connection unit is configured to establish a connection with the server in an HTTPS manner if the preset condition is not satisfied; The sending unit is configured to send the request data to the server through the established connection when sending the request data to the server; the receiving unit, configured to receive the response data corresponding to the request data returned by the server through the established connection; The judging unit is used to judge whether the instruction type of the request data to be sent is a low security requirement instruction, and if it is a low security requirement instruction, the preset condition is satisfied; The judging unit is further configured to judge whether the instruction type of the request data to be sent matches the instruction type in the preset low-security-requirement instruction list, and if it matches, the instruction type of the request data to be sent is a low-security-requirement instruction. 9. The apparatus of claim 8, wherein, The encryption processing unit is configured to obtain a key pre-issued by the server, and perform encryption processing on the request parameters in the request data by using the key and according to a specified encryption algorithm. 10. The apparatus of claim 8, wherein, The judging unit is used for judging whether the HTTP port of the server is available, and if it is available, the preset condition is satisfied. 11. The apparatus according to claim 10, wherein the judging whether the currently accessed network is a secure network comprises one or more of the following: Determine whether the currently accessed network is the network of the mobile network operator, and if so, it is a secure network; Determine whether the currently accessed network matches the network in the preset safe network list, and if it matches, it is a safe network; It is judged whether the usage times of the currently accessed network is greater than the preset value, and if so, it is a secure network. 12. The apparatus of claim 8, wherein, The judging unit is used for judging whether the current operating system allows sending request data to the HTTP port, and if so, the preset condition is satisfied. 13. A server comprising: The connection unit is used to establish a connection with the client through the HTTP port; a receiving unit, configured to receive, through the HTTP port, the request data and the first check value including the request parameters sent by the client; an encryption processing unit, configured to perform encryption processing on the request parameters in the request data according to a preset encryption algorithm to obtain a second check value; a judging unit for judging whether the first check value and the second check value are consistent; a sending unit, configured to, if consistent, return the response data corresponding to the request data to the client through the HTTP port; The connection unit is further configured to establish a connection with the client through the HTTPS port; The receiving unit is further configured to receive the request data sent by the client through the HTTPS port; The sending unit is configured to return the response data corresponding to the request data to the client through the HTTPS port. 14. The server of claim 13, wherein, The encryption processing unit is configured to perform encryption processing on the request parameters in the request data using a specified key and according to a specified encryption algorithm; Wherein, the designated key is a key delivered to the client. 15. An electronic device comprising: a processor; and a memory arranged to store computer-executable instructions which, when executed, cause the processor to perform any one of claims 1-5 The method of claim 6, or, performing the method of any one of claims 6-7. 16. A computer-readable storage medium, wherein the computer-readable storage medium stores one or more programs that, when executed by a processor, implement any one of claims 1 to 5 The method, alternatively, implements the method of any one of claims 6-7.

Images