CN110569138B - Remote service calling method, response method, device, electronic equipment and server - Google Patents

Abstract

The embodiments of the present application disclose a remote service invocation method, a response method, an apparatus, an electronic device, and a server. The method includes: acquiring the remote service content to be invoked; encrypting the remote service content to obtain the encrypted remote service content; generating a remote service invocation request based on a specified communication protocol, the remote service invocation request carrying There is the encrypted remote service content, and the destination address of the remote service invocation request is obtained based on the target uniform resource identifier; the remote service invocation request is sent to the server corresponding to the destination address for all The server executes the service corresponding to the remote service invocation request. Through the above method, the content in the remote service invocation request triggered from the target uniform resource identifier can be encrypted and sent, thereby improving the security of the remote service content in the transmission process.

Description

Remote service invocation method, response method, device, electronic device and server

technical field

The present application relates to the field of computer technology, and more particularly, to a remote service invocation method, response method, apparatus, electronic device, and server.

Background technique

With the advent of the Internet era, more services between electronic devices can call each other. The REST Web application service is an RPC (remote procedure call) service, which completes a remote service call by sending a request to a specified network address. In the related remote service invocation process, the invocation content is usually encrypted by the rules defined by the adopted communication protocol itself, resulting in that the security of the data transmitted in the remote service invocation process needs to be improved.

SUMMARY OF THE INVENTION

In view of the above problems, the present application proposes a remote service invocation method, a response method, an apparatus, an electronic device and a server to improve the above problems.

In a first aspect, the present application provides a method for invoking a remote service, which is applied to a client. The method includes: acquiring the content of the remote service to be invoked; and encrypting the content of the remote service to obtain the encrypted remote service content ; Generate a remote service invocation request based on a specified communication protocol, the remote service invocation request carries the encrypted remote service content, and the destination address of the remote service invocation request is obtained based on the target uniform resource identifier; The remote service invocation request is sent to the server corresponding to the destination address, so that the server can execute the service corresponding to the remote service invocation request.

In a second aspect, the present application provides a remote service response method, which is applied to a server. The method includes: acquiring encrypted remote service content carried in a remote service invocation request; executing the decrypted remote service content, Obtain the execution result; sign the execution result to obtain the signed execution result; generate reply information based on the specified communication protocol, the reply information carries the signed execution result; return the reply information to the sender The client of the remote service invocation request.

In a third aspect, the present application provides an apparatus for invoking a remote service, the apparatus comprising: an invocation content acquisition unit for acquiring the remote service content to be invoked; and a content encryption unit for encrypting the remote service content , obtain the encrypted remote service content; the request generation unit is used to generate a remote service invocation request based on a specified communication protocol, the remote service invocation request carries the encrypted remote service content, and the remote service invocation request The destination address of the request is obtained based on the target uniform resource identifier; the information communication unit is used to send the remote service invocation request to the server corresponding to the destination address, so that the server can perform and call the remote service. Request the corresponding service.

In a fourth aspect, the present application provides a remote service response device, the device comprising: a request parsing unit for acquiring encrypted remote service content carried in a remote service invocation request; a service execution unit for executing decrypted The remote service content of the remote service is obtained, and the execution result is obtained; the signature unit is used to sign the execution result to obtain the signed execution result; the response generation unit is used to generate reply information based on the specified communication protocol, and the reply information carrying the signed execution result; a communication unit, configured to return the reply information to the client that sent the remote service invocation request.

In a fifth aspect, the present application provides an electronic device comprising one or more processors and a memory; one or more programs are stored in the memory and configured to be executed by the one or more processors to Implement the above method.

In a sixth aspect, the present application provides a computer-readable storage medium, where a program code is stored in the computer-readable storage medium, wherein the above method is executed when the program code is executed by a processor.

In a remote service invocation method, response method, device, electronic device and server provided by the present application, after obtaining the remote service content to be invoked, the remote service content will be encrypted first, and the encrypted remote service content will be obtained. , and then generate a remote service invocation request that carries the encrypted remote service content and points to the destination address identified by the target uniform resource identifier based on the specified communication protocol, and sends the remote service invocation request to the destination address corresponding to The server is used for the server to execute the service corresponding to the remote service invocation request, so that the content in the remote service invocation request triggered from the target uniform resource identifier can be encrypted and sent by the above method, Thereby, the security of the remote service content in the transmission process is improved.

Description of drawings

In order to illustrate the technical solutions in the embodiments of the present application more clearly, the following briefly introduces the drawings that are used in the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of the present application. For those skilled in the art, other drawings can also be obtained from these drawings without creative effort.

FIG. 1 shows a schematic diagram of interaction between a client and a server according to an embodiment of the present application;

Fig. 2 shows the schematic diagram that the remote service content sent by a proposed client is intercepted;

3 shows a schematic diagram of the remote service content sent by the client being converted into plaintext for subsequent transmission at the gateway;

FIG. 4 shows a flowchart of a remote service invocation method proposed by an embodiment of the present application;

FIG. 5 shows a schematic diagram of selection of a processing method of a calculation process in a remote service invocation method proposed by an embodiment of the present application;

FIG. 6 shows a flowchart of a remote service invocation method proposed by another embodiment of the present application;

7 shows a schematic diagram of a json format-based remote service invocation instruction and corresponding instruction parameters in a remote service invocation method proposed by another embodiment of the present application;

FIG. 8 shows a schematic diagram of combining a remote service invocation instruction based on json format and corresponding instruction parameters in a remote service invocation method proposed by another embodiment of the present application;

FIG. 9 shows a schematic diagram of a specific implementation manner of a remote service invocation method proposed by another embodiment of the present application;

FIG. 10 shows a flowchart of a method for invoking a remote service proposed by yet another embodiment of the present application;

FIG. 11 shows a flowchart of a remote service invocation method proposed by another embodiment of the present application;

FIG. 12 shows a structural block diagram of a remote service invocation apparatus proposed by an embodiment of the present application;

FIG. 13 shows a structural block diagram of a remote service invocation apparatus proposed by still another embodiment of the present application;

FIG. 14 shows a structural block diagram of a remote service invocation apparatus proposed by another embodiment of the present application;

15 shows a structural block diagram of an electronic device for executing the remote service invocation method according to an embodiment of the present application in real time of the present application;

FIG. 16 shows a storage unit in real time of the present application for storing or carrying program codes for implementing the remote service invocation method according to the embodiment of the present application.

Detailed ways

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of the present application.

With the development of the information system, the business of the information system also increases. When the number of visits to our system increases and the business increases, we will find that a single machine running this system can no longer afford it. Then we can split the information system business into several unrelated services and deploy them on their own machines, so that each machine can run one or more services, in order to clear the logic and reduce the pressure on a single machine . In this case, a protocol is needed to support mutual service calls between different machines. Furthermore, the RPC (Remote Procedure Call Protocol) protocol came into being.

RPC adopts the client/server model. Among them, the program that requests the remote call service is a client, and the service provider is a server. First, the calling process sends a call message with process parameters to the server process, and then waits for a reply message. On the server side, the process stays asleep until the call message arrives. When a call message arrives, the server obtains the process parameters, calculates the result, sends a reply message, and then waits for the next call message. Finally, the client calls the process to receive the reply message, obtain the process result, and then call execution to continue. For example, as shown in Figure 1, in the entire remote service invocation process, the client handle will be called, the parameters will be transferred, and the local communication module will be called to transfer network messages to the remote host (server). The server handle gets the message and parameters and then executes the remote process corresponding to the parameter, and the executed process returns the result to the server handle, the server handle returns the result, and the communication module of the remote host (server) is called to return it to the local host ( client), the client handle is received and returned by the local communication module.

However, the inventor found in the research on the working process of the related remote service invocation that the communication protocol currently used between the client and the server may not have the function of encrypting the transmitted content, even if it has the function of encrypting the transmitted content. The function of encrypting the content cannot effectively protect the data transmitted during the remote service invocation. For example, as shown in Figure 2, even if the client uses the encrypted HTTPS protocol (or other communication protocols, such as the FTP protocol) for data transmission, in the case where the client uses the HTTPS proxy to communicate with the server, where HTTPS proxies may leak data transmitted during remote service calls due to a man-in-the-middle attack. For another example, as shown in Figure 3, the data transmitted by the client during the remote service invocation process will be decrypted into plaintext when transmitted to the HTTPS gateway of the service internal domain to which the server belongs, thereby enabling the HTTPS gateway and the server. The data transmitted between them is plaintext, which will cause the transmitted data to be eavesdropped.

Therefore, the inventor proposes that in the present application, after obtaining the remote service content to be called, the remote service content will be encrypted first to obtain the encrypted remote service content, and then based on the specified communication protocol, the The encrypted remote service content is directed to the remote service invocation request of the destination address identified by the target uniform resource identifier, and the remote service invocation method for improving the security of the remote service content carried by the remote service invocation request in the transmission process, Response method, apparatus, electronic device and server.

The embodiments of the present application will be described in detail below with reference to the accompanying drawings.

Referring to FIG. 4 , a method for invoking a remote service provided by an embodiment of the present application is applied to a client, and the method includes:

Step S110: Obtain the content of the remote service to be called.

It can be understood that the remote service call is initiated by the client side to the server side, so that the client side can call the service on the server side. Then, before the client generates a remote service invocation request sent to the server, it needs to determine what service it needs to call, and then the client can first execute to obtain the content of the remote service to be invoked.

For example, the client needs to call the server to calculate the acquired data. Then, in this case, the acquired remote service content may include the required calculation data and the required calculation method. For another example, the client needs to call the server to deduplicate the content in a file. In this case, the acquired remote service content may include the file to be deduplicated and the invocation instruction for deduplication. It can be understood that a unique identifier can be configured for the service that needs to be called. In this way, after receiving the remote service invocation request sent by the client, the server determines the unique identifier. The identifier of the property can determine which service the client needs to call this time.

There may also be various manners for triggering the client to perform the acquisition of the content of the remote service that needs to be called.

As one approach, it can be triggered based on automated events.

For applications other than the client or during the running of the client itself, if data processing needs to be performed by means of a device other than the electronic device where the client is located, it can be regarded as an automation-based event triggering method. In this way, a client or an application program other than the client can send a remote service invocation request with the help of the client, so that services in other devices can be invoked. For example, the client runs in a first electronic device, and the first electronic device also includes an application program A, and the application program A needs to call the function A for calculation during the running process. Then, the application A can send the requirement of calling function A and the input data input to the function A to the client, and then the client can obtain the content of the remote service (function A and the input data).

Alternatively, it can be triggered based on user actions.

In this way, the client can be configured with controls for user touch. Specifically, the calculation content to be executed may be decomposed in the client to obtain multiple calculation processes, and when the multiple calculation processes are all executed, it indicates that the calculation content is completed. In this way, the client can configure a selection control for each calculation process, so that the user can choose whether to execute the calculation process locally by the client or to execute the calculation process by means of a remote service call. For example, as shown in FIG. 5 , for the decomposed calculation process A, calculation process B and calculation process C. There are two selection controls, local and remote, respectively. If the user selects local for the calculation process A, then when the client executes the calculation process A, the client will directly perform the calculation locally. However, if the user selects remote corresponding to the calculation process B, when the client subsequently executes the calculation process B, the client will obtain the content of the remote service that needs to be called according to the calculation process B.

Step S120: Encrypt the remote service content to obtain encrypted remote service content.

Among them, in order to further enable the remote service content called by the client to have better security without being hijacked or monitored by other devices, the client will encrypt the acquired remote service content. The client can encrypt the remote service content in various ways.

As one approach, the client can encrypt the remote service content based on a locally stored static key. It can be understood that a static key can be understood as a key that remains unchanged from the time it is stored to the client. In this way, after receiving the remote service invocation request sent by the client, the subsequent server will also decrypt based on the secret key corresponding to the static secret key. Optionally, if the static key used by the client is a symmetric encryption key, the key corresponding to the static key is the same as the static key. Optionally, if the static key used by the client is an asymmetric encryption key, the key corresponding to the static key is the corresponding asymmetric key.

As another way, the client can encrypt the remote service content based on the dynamic key obtained from the server periodically. Understandably, a dynamic key refers to a key that is updated on a regular basis. For example, the client can request the current latest key from the server every hour or even a shorter period, and then encrypt based on the current locally stored latest key every time the remote service content is encrypted .

It is understandable that, in order to make the secret key periodically requested by the client to be the latest secret key, the server will also periodically update the secret key, and the period for the server to update the secret key can be the same as the client's request period. For example, the server can update the secret key every half an hour or an hour, and then broadcast a message that the current secret key has been updated to all clients, so that the client can request the latest secret key from the server accordingly. In addition, the server can also directly broadcast the latest key to the client through a broadcast message. Then, through the method of dynamic secret key, the secret key encrypted by the remote service content can be updated regularly, so that even if a secret key is obtained by other illegal users, it is impossible to easily obtain the encrypted secret key based on the updated other secret key. The remote service content further improves the security of the remote service content in the transmission process.

Among them, it should be noted that the server can determine the update period of the secret key according to various methods.

As a way, the server can update the secret key according to the period configured by the background maintainer. For example, if the key update cycle configured by the background maintenance personnel is 1 hour, then the server will update the key according to the cycle of 1 hour, and the corresponding client can also obtain the latest key every 1 hour.

As another way, the server can determine the update cycle of the secret key according to the current remote service invocation frequency. It is understandable that if the current frequency of remote service calls is not high, for example, there is only one call every 1 hour on average, but if the server updates the secret key every 10 minutes, it will inevitably cause great waste of resources. Because, even though the server intensively updates the secret key, the client does not use the finer secret key effectively, and even some updated secret keys have been replaced by new secret keys before they are used. Then, by determining the update cycle of the secret key according to the current remote service invocation frequency, it can not only improve the utilization rate of the updated secret key, but also improve the security of the remote service content during the transmission process.

Optionally, the length of the period for the server to update the secret key is inversely proportional to the current remote service invocation frequency. That is, the higher the current remote service invocation frequency, the shorter the period for the server to update the secret key. It can be understood that, for the server, there can be multiple clients that will make remote service calls. When the client makes frequent remote service calls, the remote service content that needs to be transmitted to the server is within a certain period of time. The more there are, the greater the probability that the transmitted remote service content will be captured or intercepted. In this way, the server can update the secret key more frequently, and correspondingly, the client can obtain the latest secret key from the server more frequently, which can ensure the security of the transmitted remote service content to a greater extent. . Illustratively, on the server side, it is detected that the current number of remote service calls is the first target number, then the current key update cycle is configured to be updated every m minutes, and when it is detected that the current number of remote service calls is the second target number number of times, then configure the current key update cycle to be updated every n minutes, where the first target number of times is greater than the second target number of times, and m is less than n.

Step S130: Generate a remote service invocation request based on a specified communication protocol, the remote service invocation request carries the encrypted remote service content, and the destination address of the remote service invocation request is obtained based on the target uniform resource identifier.

It can be understood that the communication between the client and the server will be based on a certain communication protocol. Then, when the client generates the remote service invocation request, it will generate the remote service invocation request based on the communication protocol currently agreed with the client. For example, if the agreement between the client and the server uses the HTTP protocol or the HTTPS protocol to communicate, the client will generate a remote service call request based on the HTTP protocol or the HTTPS protocol correspondingly. For example, for the protocol based on HTTP or HTTPS, it includes a header part and a body part. Then the encrypted remote service content can be stored in the body part of it.

It should be noted that, no matter what communication protocol the client uses to generate the remote service invocation request, the network address of the server needs to be obtained first. Then, in this embodiment, the client can obtain the destination address of the server based on various methods.

In one way, the client obtains multiple Uniform ResourceIdentifiers (URIs). It should be noted first that the uniform resource identifier is a character string used to identify the name of a certain Internet resource, and the identifier allows the client to interact with resources on the Internet (including local and Internet) through a specific protocol. Then, in this embodiment, the configured uniform resource identifier may be used to mark the network address of the server.

Optionally, the same server can support different clients to make remote service calls, and correspondingly, the same client can also make remote service calls to different servers, then in this way, the client By obtaining the current target uniform resource identifier, the server that is currently invoking the remote service can be obtained. It should be noted that, in addition to identifying the network address of the server, the uniform resource identifier can also identify different remote service contents. For example, the Uniform Resource Identifier may characterize the remote service content by the value of the specified field it includes. Then in this way, after the client determines the required remote service content, the client can determine the uniform resource identifier of the same remote service content represented by the value of the specified field and the required remote service content determined by the client as the target The uniform resource identifier is obtained, and the target address specified by the determined target uniform resource identifier is obtained as the network address of the server at the same time.

For example, the client locally stores the uniform resource identifier A, the uniform resource identifier B, and the uniform resource identifier C. The destination address represented by the uniform resource identifier A points to the server A, the destination address represented by the uniform resource identifier B points to the server B, and the destination address represented by the uniform resource identifier C points to the server C. Then, when the client obtains the remote service content and judges that the obtained remote service content is the same as the remote service content represented by the specified field of the uniform resource identifier C, it will use the uniform resource identifier C as the target uniform resource identifier, Further, the network address of the server C is used as the destination address of the generated remote service invocation request.

Step S140: Send the remote service invocation request to the server corresponding to the destination address, so that the server executes the service corresponding to the remote service invocation request.

In a method for invoking a remote service provided by this application, after acquiring the content of the remote service to be invoked, the content of the remote service will be encrypted first to obtain the content of the encrypted remote service, and then the content of the remote service will be generated based on the specified communication protocol. A remote service invocation request that has the encrypted remote service content and points to the destination address identified by the target uniform resource identifier, sends the remote service invocation request to the server corresponding to the destination address for use in the service The terminal executes the service corresponding to the remote service invocation request, and through the above method, the content in the remote service invocation request triggered from the target uniform resource identifier can be encrypted and sent, so as to avoid the remote service content in the transmission process due to communication The security problem caused by the content encryption method of the protocol itself is not secure enough, thereby improving the security of the remote service content during the transmission process.

Referring to FIG. 6, a remote service invocation method provided by an embodiment of the present application is applied to a client, and the method includes:

Step S210: Obtain the content of the remote service to be called.

It should be noted that the content of the remote service represents what action the client expects the server to perform, and what parameters the server uses to perform the specified action. For example, the client expects the server to deduplicate repeated Chinese characters in the content of the specified file. Then the "de-duplication" here is the action that the client expects the server to perform, and the "Chinese character" here is the parameter based on which the server is expected to be in the process of de-duplication. For another example, the client expects the server to call the specified function block for numerical calculation, and this function block needs to have an input value, then this "output value" is the basis for the expected server to call the specified function block for numerical calculation. parameter.

Based on the above content, as one way, the step of acquiring the content of the remote service to be invoked includes: acquiring the remote service invocation instruction arranged based on the target data exchange format; The instruction parameter corresponding to the remote service invocation instruction; the remote service invocation instruction and the instruction parameter corresponding to the remote service invocation instruction are combined, and the combined content arranged based on the target data exchange format is used as the remote service content.

It should be noted that the included remote service invocation instruction is the operation that the client expects the server to perform, and the instruction parameter corresponding to the remote service invocation instruction is the basis on which the client expects the server to perform the operation. parameter. The target data exchange format may be various, for example, it may be a data exchange format such as json or xml. As shown in FIG. 7 , a remote service content in json format is shown. The common content block in the remote service content is used to store remote service invocation instructions. For example, the content corresponding to the "Action" field in the common content block in the figure is a remote service invocation instruction. The content in the Specific content block is the command parameter corresponding to the remote service invocation command.

In one way, the remote service invocation instruction includes an instruction item and instruction content corresponding to the instruction item, and the instruction parameter includes a parameter item and parameter content corresponding to the parameter item. The step of merging the invocation instruction with the instruction parameters corresponding to the remote service invocation instruction includes: merging the remote service invocation instruction and the instruction parameters corresponding to the remote service invocation instruction in an order of arrangement; The characters of the parameter items are all converted to lowercase characters; the specified characters in the instruction content and the parameter content are deleted and a line break is configured at the end position of the instruction content and the parameter content.

For example, referring to FIG. 7 again, for ""Action":"XXXX"" in the remote service invocation instruction, "Action" in it can be regarded as an instruction item, and "XXXX" in it can be regarded as an instruction content. Similarly, "Arg1", "Arg2" and "Arg3" are all parameter items, and "alias/mydek", "1234" and "hex value of 1234-byte data" are all parameter contents.

Then, for the form after merging, please refer to the content shown in FIG. 8 .

Step S220: Sign the remote service content to obtain the signed remote service content.

It can be understood that, the function of signing the remote service content in this embodiment is to prevent the remote service content from being tampered with during transmission. Among them, the client can sign the remote transmission content based on various methods. Optionally, the client can sign the remote transmission content based on a hash algorithm (eg, MD5, SHA1 and SHA256).

Step S230: Encrypt the signed remote service content to obtain the encrypted remote service content.

It can be understood that, the client encrypts the signed remote service content, which can further make the remote service content therein have better security. In this embodiment of the present application, the client may encrypt the signed remote service content based on various methods.

As a method, the step of encrypting the signed remote service content to obtain the encrypted remote service content includes: acquiring the value of the target field in the target uniform resource identifier, wherein different uniform resource identifiers The represented destination addresses are different, and the values of the included target fields are different, and the encryption algorithms corresponding to different values of the target fields are different; the encryption algorithm corresponding to the value of the target field is obtained; based on the encryption algorithm The signed remote service content is encrypted to obtain the encrypted remote service content.

It can be understood that the callable remote services represented by different uniform resource identifiers are different. In this way, different uniform resource identifiers can also correspond to different encryption algorithms, thereby further improving the security of the remote service content. For example, for the file deduplication service and the service that invokes the function block for calculation, the corresponding remote service content can be encrypted corresponding to different encryption algorithms.

For another example, in the case of multiple servers, different servers may be responsible for executing different remote service contents. For example, one server can be configured to be responsible for file processing, another server can be configured to provide function blocks for numerical calculation, and another server can be configured to be responsible for crawling network information. In this way, different encryption algorithms can be configured for different servers. For example, if the remote service content obtained by the client is to call the server to process files, the final remote service invocation request will be sent to the server responsible for file processing, and then the remote service content can be encrypted based on encryption algorithm A. If the remote service content obtained by the client is to call the server to perform function computing, the final remote service call request will be sent to the server responsible for providing function block computing, and then the remote service content can be encrypted based on encryption algorithm B.

Step S240: Generate a remote service invocation request based on the specified communication protocol, the remote service invocation request carries the encrypted remote service content, and the destination address of the remote service invocation request is obtained based on the target uniform resource identifier.

Step S250: Send the remote service invocation request to the server corresponding to the destination address, so that the server can execute the service corresponding to the remote service invocation request.

Exemplarily, as shown in FIG. 9, a specific implementation is shown. In this way, the communication between the client and the server is based on the HTTP/HTTPS protocol. Wherein, the assembly command parameter can be understood as obtaining the content of the remote service to be called in step S210. Then, the remote service content is signed based on the HMAC signature method, and the signed remote service content is encrypted based on the PKCS7 method (the client's built-in server certificate ServiceCertificate). Correspondingly, after parsing the received remote service invocation request, the server also decrypts based on the PKCS7 method, and performs signature verification based on the HMAC signature method.

For the server, the server can encrypt the execution result based on the AES-256-GCM method, and also sign based on the HMAC signature. Correspondingly, the client will verify the signature based on the HMAC signature method, and decrypt it based on the AES-256-GCM method.

In a method for invoking a remote service provided by the present application, after acquiring the content of the remote service to be invoked generated based on a specified data exchange format, the content of the remote service is first signed, and then the signed content is encrypted. Obtain the encrypted remote service content, and then generate a remote service invocation request that carries the encrypted remote service content and points to the destination address identified by the target uniform resource identifier based on the specified communication protocol, and the remote service invocation request. It is sent to the server corresponding to the destination address, so that the server executes the service corresponding to the remote service invocation request, and then through the above method, for the remote service invocation request triggered from the target uniform resource identifier The content of the remote service can be encrypted and sent, thereby improving the security of the remote service content during transmission.

Referring to FIG. 10 , a remote service invocation method provided by an embodiment of the present application is applied to a client, and the method includes:

Step S310: Obtain the content of the remote service to be called.

Step S320: Encrypt the remote service content to obtain the encrypted remote service content.

Step S330: Acquire pseudo-remote service content, where the pseudo-remote service content is different from the desired remote service content.

It should be noted that, the pseudo-remote service content in this embodiment is content used to interfere with other illegal persons' judgment of the real remote service content. For example, what the client actually wants to do is to call the function block of the server to perform function calculation, then the content of the pseudo-remote service here can be to call the server to process files. For another example, if what the client actually wants to do is to call the server to process files, then the content of the pseudo-remote service here can be to call the server to crawl network information.

Step S340: splicing the pseudo-remote service content and the encrypted remote service content to obtain the target remote service content, and a spacer character is configured between the pseudo-remote service content and the encrypted remote service content, for character segmentation by the server.

It should be noted that transmitting the content of the pseudo-remote service in plaintext is beneficial to confuse other illegal persons. The reason is that when other illegal personnel intercept the target remote service content through the device, it may be easier to obtain the plaintext pseudo-remote service content, and they may mistakenly think that this is the remote service content actually sent by the client, while the It is easy to ignore the encrypted real remote service content, so as to protect the real remote service content.

It is understandable that both the encrypted remote service content (real remote service content) and the pseudo-remote service content are placed in the same field in the subsequently generated remote service invocation request. Then, the server, which may be configured with space characters between the pseudo remote service content and the encrypted remote service content, may determine how to perform character segmentation, so as to distinguish the pseudo remote service content from the encrypted remote service content.

Step S350: Generate a remote service invocation request based on the specified communication protocol, the remote service invocation request carries the target remote service content, and the destination address of the remote service invocation request is obtained based on the target uniform resource identifier.

Step S360: Send the remote service invocation request to the server corresponding to the destination address, so that the server executes the service corresponding to the remote service invocation request.

In a method for invoking a remote service provided by the present application, after obtaining the content of the remote service to be called, the content of the remote service is encrypted first to obtain the content of the remote service after encryption, and then the content of the remote service that is different from the encrypted content is obtained. The pseudo-remote service content of the remote service content, and then splicing the pseudo-remote service content and the encrypted remote service content to obtain the target remote service content, and then generating the target remote service content based on the specified communication protocol. And point to the remote service invocation request of the destination address identified by the target uniform resource identifier, and send the remote service invocation request to the server corresponding to the destination address, so that the server can execute the remote service invocation request. The corresponding service, and further through the above method, the content in the remote service invocation request triggered from the target uniform resource identifier can be encrypted and sent, thereby improving the security of the remote service content in the transmission process.

Referring to FIG. 11 , a method for invoking a remote service provided by an embodiment of the present application is applied to a server, and the method includes:

Step S410: Obtain the encrypted remote service content carried in the remote service invocation request.

Step S420: Execute the decrypted remote service content to obtain an execution result.

Step S430: Sign the execution result to obtain a signed execution result.

Step S440: Generate reply information based on the specified communication protocol, where the reply information carries the signed execution result.

Step S450: Return the reply information to the client that sent the remote service invocation request.

In a remote service response method provided by the present application, the decrypted remote service content is executed, after obtaining the execution result, the execution result is signed, the signed execution result is obtained, and then reply information is generated based on a specified communication protocol , the reply information carries the signed execution result, and the reply information is returned to the client that sent the remote service invocation request, so that the execution result may have a result that does not depend entirely on the communication protocol itself. The encryption method is used to protect the information security, thereby improving the security of the remote service content during the transmission process.

Referring to FIG. 12 , a remote service invocation apparatus provided by an embodiment of the present application includes:

The calling content obtaining unit 510 is used to obtain the content of the remote service to be called.

In one way, calling the content obtaining unit 510 is specifically configured to obtain the remote service invocation instruction arranged based on the target data exchange format; and obtain instruction parameters corresponding to the remote service invocation instruction arranged based on the target data exchange format; The remote service invocation instruction and the instruction parameter corresponding to the remote service invocation instruction are combined, and the combined content arranged based on the target data exchange format is used as the remote service content.

Specifically, in one mode, the remote service invocation instruction includes an instruction item and instruction content corresponding to the instruction item, the instruction parameter includes a parameter item and the parameter content corresponding to the parameter item, and the content acquisition unit 510 is called. , which is specifically used to combine the remote service invocation instruction and the instruction parameters corresponding to the remote service invocation instruction in order of arrangement; convert the characters of the instruction item and the parameter item into lowercase characters; Delete the specified characters in the content and the parameter content; configure a newline character at the end position in the instruction content and the parameter content.

The content encryption unit 520 is configured to encrypt the remote service content to obtain encrypted remote service content.

In one way, the content encryption unit 520 is specifically configured to sign the remote service content to obtain the signed remote service content; and encrypt the signed remote service content to obtain the encrypted remote service content.

Wherein, further, the content encryption unit 520 is specifically configured to obtain the value of the target field in the target uniform resource identifier, wherein the destination addresses represented by different uniform resource identifiers are different, and the values of the included target fields are different, The encryption algorithms corresponding to different values of the target fields are different; the encryption algorithms corresponding to the values of the target fields are obtained; the signed remote service content is encrypted based on the encryption algorithm, and the encrypted remote service content is obtained. Service Content.

The request generation unit 530 is configured to generate a remote service invocation request based on a specified communication protocol, the remote service invocation request carries the encrypted remote service content, and the destination address of the remote service invocation request is unified based on the target Resource ID is obtained.

As shown in Figure 13, the request generating unit 530 includes:

The pseudo-content obtaining subunit 531 is configured to obtain pseudo-remote service content, where the pseudo-remote service content is different from the desired remote service content.

The content merging subunit 532 is configured to splicing the pseudo-remote service content and the encrypted remote service content to obtain the target remote service content, and between the pseudo-remote service content and the encrypted remote service content A spacer character is configured for the server to perform character segmentation.

The request generating subunit 533 is configured to generate a remote service invocation request based on a specified communication protocol, where the remote service invocation request carries the target remote service content.

The information communication unit 540 is configured to send the remote service invocation request to the server corresponding to the destination address, so that the server can execute the service corresponding to the remote service invocation request.

Referring to FIG. 14, a remote service invocation apparatus 600 provided by an embodiment of the present application, the apparatus 600 includes:

a request parsing unit 610, configured to obtain the encrypted remote service content carried in the remote service invocation request;

a service execution unit 620, configured to execute the decrypted remote service content to obtain an execution result;

a signature unit 630, configured to sign the execution result to obtain the signed execution result;

a response generating unit 640, configured to generate reply information based on a specified communication protocol, where the reply information carries the signed execution result;

A communication unit 650, configured to return the reply information to the client that sent the remote service invocation request

It should be noted that the apparatus embodiments in the present application correspond to the foregoing method embodiments, and the specific principles in the apparatus embodiments may refer to the content in the foregoing method embodiments, which will not be repeated here.

An electronic device provided by the present application will be described below with reference to FIG. 15 .

Referring to FIG. 15 , based on the foregoing remote service invocation method and apparatus, an embodiment of the present application further provides another electronic device 100 that can execute the foregoing remote service invocation method. The electronic device 100 includes one or more (only one shown in the figure) a processor 102, a memory 104, and a network module 106 that are coupled to each other. Wherein, the memory 104 stores a program that can execute the content in the foregoing embodiments, and the processor 102 can execute the program stored in the memory 104 .

The processor 102 may include one or more processing cores. The processor 102 uses various interfaces and lines to connect various parts of the entire electronic device 100, and executes by running or executing the instructions, programs, code sets or instruction sets stored in the memory 104, and calling the data stored in the memory 104. Various functions of the electronic device 100 and processing data. Optionally, the processor 102 may use at least one of digital signal processing (Digital Signal Processing, DSP), field-programmable gate array (Field-Programmable Gate Array, FPGA), and programmable logic array (Programmable Logic Array, PLA). implemented in hardware. The processor 102 may integrate one or a combination of a central processing unit (Central Processing Unit, CPU), a graphics processing unit (Graphics Processing Unit, GPU), a modem, and the like. Among them, the CPU mainly handles the operating system, user interface and application programs, etc.; the GPU is used for rendering and drawing of the display content; the modem is used to handle wireless communication. It can be understood that, the above-mentioned modem may not be integrated into the processor 102, and is implemented by a communication chip alone.

The memory 104 may include random access memory (Random Access Memory, RAM), or may include read-only memory (Read-Only Memory). Memory 104 may be used to store instructions, programs, codes, sets of codes, or sets of instructions. The memory 104 may include a stored program area and a stored data area, wherein the stored program area may store instructions for implementing an operating system, instructions for implementing at least one function (such as a touch function, a sound playback function, an image playback function, etc.) , instructions for implementing the following method embodiments, and the like. The storage data area may also store data created by the terminal 100 during use (such as phone book, audio and video data, chat record data) and the like.

The network module 106 is used for receiving and sending electromagnetic waves, realizing mutual conversion between electromagnetic waves and electrical signals, so as to communicate with a communication network or other devices, for example, communicate with an audio playback device. The network module 106 may include various existing circuit elements for performing these functions, eg, antennas, radio frequency transceivers, digital signal processors, encryption/decryption chips, subscriber identity module (SIM) cards, memory, etc. . The network module 106 can communicate with various networks such as the Internet, an intranet, a wireless network, or communicate with other devices through a wireless network. The aforementioned wireless network may include a cellular telephone network, a wireless local area network, or a metropolitan area network. For example, the network module 106 may exchange information with the base station.

Please refer to FIG. 16 , which shows a structural block diagram of a computer-readable storage medium provided by an embodiment of the present application. The computer-readable medium 800 stores program codes, and the program codes can be invoked by the processor to execute the methods described in the above method embodiments.

The computer readable storage medium 800 may be an electronic memory such as flash memory, EEPROM (Electrically Erasable Programmable Read Only Memory), EPROM, hard disk, or ROM. Optionally, the computer-readable storage medium 800 includes a non-transitory computer-readable storage medium. Computer readable storage medium 800 has storage space for program code 810 to perform any of the method steps in the above-described methods. These program codes can be read from or written to one or more computer program products. Program code 810 may be compressed, for example, in a suitable form.

In a remote service invocation method, response method, device, electronic device and server provided by the present application, after obtaining the remote service content to be invoked, the remote service content will be encrypted first, and the encrypted remote service content will be obtained. , and then generate a remote service invocation request that carries the encrypted remote service content and points to the destination address identified by the target uniform resource identifier based on the specified communication protocol, and sends the remote service invocation request to the destination address corresponding to The server is used for the server to execute the service corresponding to the remote service invocation request, so that the content in the remote service invocation request triggered from the target uniform resource identifier can be encrypted and sent by the above method, The security problem caused by the insufficient security of the content encryption method of the communication protocol itself during the transmission of the remote service content is avoided, thereby improving the security of the remote service content in the transmission process.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand: it can still be Modifications are made to the technical solutions described in the foregoing embodiments, or some technical features thereof are equivalently replaced; and these modifications or replacements do not drive the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims (7)

1. A remote service calling method applied to a client side is characterized by comprising the following steps:

acquiring remote service content required to be called;

signing the remote service content to obtain signed remote service content;

acquiring values of target fields in target uniform resource identifiers, wherein different uniform resource identifiers represent different destination addresses, different uniform resource identifiers comprise different values of the target fields, and different encryption algorithms corresponding to the different values of the target fields are different;

acquiring an encryption algorithm corresponding to the value of the target field from locally stored encryption algorithms, wherein the locally stored encryption algorithms are updated encryption algorithms acquired by the client from a server periodically;

encrypting the signed remote service content based on the encryption algorithm to obtain encrypted remote service content;

generating a remote service call request based on a specified communication protocol, wherein the remote service call request carries the encrypted remote service content, and the destination address of the remote service call request is obtained based on the target uniform resource identifier;

and sending the remote service calling request to a server corresponding to the destination address so that the server executes the service corresponding to the remote service calling request.

2. The method of claim 1, wherein the step of obtaining the remote service content to be invoked comprises:

acquiring a remote service calling instruction arranged based on a target data exchange format;

acquiring instruction parameters corresponding to the remote service call instruction arranged based on the target data exchange format;

and combining the remote service call instruction with an instruction parameter corresponding to the remote service call instruction, and taking the combined content arranged based on the target data exchange format as the remote service content.

3. The method according to claim 2, wherein the remote service call instruction comprises an instruction item and an instruction content corresponding to the instruction item, the instruction parameter comprises a parameter item and a parameter content corresponding to the parameter item, and the step of combining the remote service call instruction and the instruction parameter corresponding to the remote service call instruction comprises:

combining the remote service call instruction and instruction parameters corresponding to the remote service call instruction according to an arrangement sequence;

converting the characters of the instruction item and the parameter item into lower case characters;

deleting specified characters in the instruction content and the parameter content;

and arranging a line feed character at the end position in the instruction content and the parameter content.

4. The method of claim 1, wherein generating a remote service invocation request based on a specified communication protocol comprises:

acquiring pseudo remote service content, wherein the pseudo remote service content is different from the remote service content required to be called;

splicing the pseudo remote service content and the encrypted remote service content to obtain target remote service content, wherein interval characters are configured between the pseudo remote service content and the encrypted remote service content for the server to perform character segmentation;

and generating a remote service calling request based on a specified communication protocol, wherein the remote service calling request carries the target remote service content.

5. A remote service invocation apparatus, characterized in that said apparatus comprises:

the calling content acquisition unit is used for acquiring remote service content to be called;

the content encryption unit is used for signing the remote service content to obtain the signed remote service content; acquiring values of target fields in target uniform resource identifiers, wherein different uniform resource identifiers represent different destination addresses, different uniform resource identifiers comprise different values of the target fields, and different encryption algorithms corresponding to the different values of the target fields are different; acquiring an encryption algorithm corresponding to the value of the target field from a locally stored encryption algorithm, wherein the locally stored encryption algorithm is an updated encryption algorithm which is acquired by a client from a server periodically; encrypting the signed remote service content based on the encryption algorithm to obtain encrypted remote service content;

a request generating unit, configured to generate a remote service invocation request based on a specified communication protocol, where the remote service invocation request carries the encrypted remote service content, and a destination address of the remote service invocation request is obtained based on the target uniform resource identifier;

and the information communication unit is used for sending the remote service calling request to a server corresponding to the destination address so that the server can execute the service corresponding to the remote service calling request.

6. An electronic device comprising one or more processors and memory;

one or more programs are stored in the memory and configured to be executed by the one or more processors to implement the method of any of claims 1-4.

7. A computer-readable storage medium, having a program code stored therein, wherein the program code when executed by a processor performs the method of any of claims 1-4.

Images