# US 10,320,556 B2 · Method, mobile terminal, device, and readable storage medium for preventing accessed data from being tampered with

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,320,556 B2
- Document ID: US10320556B2
- Status: Granted
- Kind: B2
- Application number: 15/736,364
- Filed: 2017-01-23
- Published: 2018-06-28
- Granted: 2019-06-11
- Earliest claimed: 2016-01-25
- Assignees: Ping An Technology (Shenzhen) Co., Ltd.
- Applicants: Ping An Technology (Shenzhen) Co., Ltd.
- Inventors: Jianwei Chen; Huiling Cao
- Web page: https://patentgrep.com/patent/US10320556B2

## CPC

- H04W 12/08: Access security
- H04L 9/0618: {Block ciphers, i.e. encrypting groups of characters of a plain text message using fixed encryption transformation}
- H04L 9/3228: {One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/123: {received data contents, e.g. message integrity}
- H04W 12/03: Protecting confidentiality, e.g. by encryption
- H04W 12/106: Packet or message integrity
- H04W 12/12: Detection or prevention of fraud
- H04W 88/02: Terminal devices
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 9/3247: {involving digital signatures}
- H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)}
- H04L 63/10: {for controlling access to devices or network resources}
- H04L 63/1425: {Traffic logging, e.g. anomaly detection}
- H04L 2209/80: Wireless
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Disclosed are a method, a mobile terminal, a device, as well as a readable storage medium for preventing accessed data from being tampered with. The mobile terminal can: receive a data server access instruction triggered by a user for an application on the mobile terminal, and acquire from the data server a corresponding configuration file of the application and a version control file carrying verification ciphertext; encrypt the acquired configuration file according to a preset encryption method to obtain a corresponding first encrypted value of the configuration file; extract the verification ciphertext from the acquired version control file and decrypt the verification ciphertext to obtain a corresponding plaintext encrypted value; and analyze the consistency between the first encrypted value and the plaintext encrypted value and finally allow the application to access the corresponding accessed data when determining the first encrypted value and the plaintext encrypted value are consistent.

## Claims

### Claim 1

A method of preventing to-be-accessed data from being tampered with in an offline cache, comprising:
receiving, by a mobile terminal, a data server access instruction triggered by a user for a web-based application on the mobile terminal;
acquiring, from a data server, a corresponding configuration file of the web-based application and a version control file carrying a verification ciphertext in response to the data server access instruction before accessing the data server;
encrypting, by the mobile terminal, the acquired configuration file according to a preset encryption method to obtain a corresponding first encrypted value of the configuration file;
extracting, by the mobile terminal, the verification ciphertext from the acquired version control file and decrypting the extracted verification ciphertext to obtain a corresponding plaintext encrypted value of the verification ciphertext; and
analyzing, by the mobile terminal, whether the first encrypted value and the plaintext encrypted value are consistent or not, and allowing the web-based application to access the to-be-accessed data in response to determining that the first encrypted value and the plaintext encrypted value are consistent.

### Claim 2 (depends on 1)

The method of claim 1, further comprising:
rejecting, by the mobile terminal, the web-based application access to the to-be-accessed data when an analyzing result is that the first encrypted value and the plaintext encrypted value are inconsistent; or generating a reminder message to alert the user that the to-be-accessed data is at a risk of being tampered with.

### Claim 3 (depends on 2)

The method of claim 2, wherein extracting the verification ciphertext and decrypting the extracted verification ciphertext comprises:
extracting, by the mobile terminal, the verification ciphertext from the version control file and decrypting the extracted verification ciphertext using a public key generated in advance by a key generator, to obtain the corresponding plaintext encrypted value of the verification ciphertext, wherein the public key is matched with a private key in a key pair to which the public key belongs, and the public key is prestored in a corresponding preset type file of the web-based application.

### Claim 4 (depends on 3)

The method of claim 3, further comprising, prior to receiving the data server access instruction and acquiring the corresponding configuration file and the version control file:
building, by the mobile terminal, the to-be-accessed data of the web-based application, and encrypting the configuration file of the to-be-accessed data according to the preset encryption method, to obtain the corresponding plaintext encrypted value of the configuration file;
encrypting the obtained plaintext encrypted value using the private key generated in advance by the key generator, to obtain the corresponding verification ciphertext of the plaintext encrypted value; and
putting the verification ciphertext in the version control file of the to-be-accessed data, and distributing the to-be-accessed data, the version control file carrying the verification ciphertext, as well as the configuration file to the data server.

### Claim 5 (depends on 1)

The method of claim 1, wherein extracting the verification ciphertext and decrypting the extracted verification ciphertext comprises:
extracting, by the mobile terminal, the verification ciphertext from the version control file and decrypting the extracted verification ciphertext using a public key generated in advance by a key generator, to obtain the corresponding plaintext encrypted value of the verification ciphertext, wherein the public key is matched with a private key in a key pair to which the public key belongs, and the public key is prestored in a corresponding preset type file of the web-based application.

### Claim 6 (depends on 5)

The method of claim 5, further comprising, prior to receiving the data server access instruction and acquiring the corresponding configuration file and the version control file:
building, by the mobile terminal, the to-be-accessed data of the web-based application, and encrypting the configuration file of the to-be-accessed data according to the preset encryption method, to obtain the corresponding plaintext encrypted value of the configuration file;
encrypting the obtained plaintext encrypted value using the private key generated in advance by the key generator, to obtain the corresponding verification ciphertext of the plaintext encrypted value; and
putting the verification ciphertext in the version control file of the to-be-accessed data, and distributing the to-be-accessed data, the version control file carrying the verification ciphertext, as well as the configuration file to the data server.

### Claim 7 (depends on 1)

The method of claim 1, wherein the preset encryption method comprises a message digest algorithm.

### Claim 8

A device for preventing to-be-accessed data from being tampered with in an offline cache, the device comprising a processing unit, as well as a system for preventing the to-be-accessed data from being tampered with, an input/output unit, a communication unit, and a storage unit that are coupled to the processing unit, wherein the input/output unit is configured for inputting a user instruction and outputting response data of the device for preventing the to-be-accessed data from being tampered with to the input user instruction; the communication unit is configured for a communicative connection with a mobile terminal or a background server; the storage unit is configured for storing the system for preventing the to-be-accessed data from being tampered with as well as operating data of the system; the processor unit is configured for executing the system for preventing the to-be-accessed data from being tampered with,
wherein, the device is configured for
receiving a data server access instruction triggered by a user for a web-based application, and acquiring from the data server a corresponding configuration file of the application and a version control file carrying verification ciphertext;
encrypting the acquired configuration file according to a preset encryption method to obtain a corresponding first encrypted value of the configuration file;
extracting from the acquired version control file the verification ciphertext and decrypting the extracted verification ciphertext to obtain a corresponding plaintext encrypted value of the verification ciphertext; and
analyzing whether the first encrypted value and the plaintext encrypted value are consistent or not and allowing the web-based application to access the to-be-accessed data in response to determining that the first encrypted value and the plaintext encrypted value are consistent.

### Claim 9 (depends on 8)

The device of claim 8, wherein the processing unit is further configured for executing the system for preventing the to-be-accessed data from being tampered with to cause the device to perform the following operations:
rejecting the web-based application access to the to-be-accessed data when an analyzing result is that the first encrypted value and the plaintext encrypted value are inconsistent; or generating a reminder message to alert the user that the to-be-accessed data is at a risk of being tampered with.

### Claim 10 (depends on 8)

The device of claim 8, wherein extracting the verification ciphertext and decrypting the extracted verification ciphertext comprises:
extracting the verification ciphertext from the version control file and decrypting the extracted verification ciphertext using a public key generated in advance by a key generator, to obtain the corresponding plaintext encrypted value of the verification ciphertext, wherein the public key is matched with a private key in a key pair to which the public key belongs, and the public key is prestored in a corresponding preset type file of the web-based application.

### Claim 11 (depends on 10)

The device of claim 10, wherein the processing unit is further configured for executing the system for preventing the to-be-accessed data from being tampered with to cause the device to perform the following operations:
building the to-be-accessed data of the web-based application, and encrypting the configuration file of the to-be-accessed data according to the preset encryption method, to obtain the corresponding plaintext encrypted value of the configuration file;
encrypting the obtained plaintext encrypted value using the private key generated in advance by the key generator, to obtain the corresponding verification ciphertext of the plaintext encrypted value; and
putting the verification ciphertext in the version control file of the to-be-accessed data, and distributing the to-be-accessed data, the version control file carrying the verification ciphertext, as well as the configuration file to the data server.

### Claim 12 (depends on 8)

The device of claim 8, wherein the preset encryption method comprises a message digest algorithm.