Method and system for secure communication

A system for secure communication, comprising:

• a first terminal and a second terminal, wherein
• the first terminal is configured to send a request message to the second terminal, and to initiate a first time counting according to a preset timing mode when finishing sending the request message, the request message at least containing data to be processed;
• the second terminal is configured to receive the request message, and to obtain a response message according to the request message;
• the first terminal is further configured to send a response notification message to the second terminal when a value of the first time counting reaches a first value, and to initiate a second time counting according to the preset timing mode when finishing sending the response notification message;
• the second terminal is further configured to receive the response notification message, and to send the response message to the first terminal;
• the first terminal is further configured to permit starting to receive the response message when a value of the second time counting is within an effective threshold of a second value, wherein the second value indicates a time needed by the second terminal from finishing receiving the response notification message to sending the response message.

A method for secure communication, comprising:

• sending by a first terminal a request message to a second terminal, and initiating a first time counting according to a preset timing mode when finishing sending the request message, the request message at least containing data to be processed;
• receiving by the second terminal the request message, and obtaining by the second terminal response data according to the data to be processed in the request message;
• sending by the first terminal a response notification message to the second terminal when a value of the first time counting reaches a first value, and initiating a second time counting according to the preset timing mode when finishing sending the response notification message;
• receiving by the second terminal the response notification message, conducting by the second terminal a signing operation on a message to be signed to obtain signature data, and sending by the second terminal a response message to the first terminal, wherein the message to be signed contains the response data and a second value, the second value indicates a sum of a time needed by the second terminal to analyze the response notification message and a time estimated for conducting the signing operation, and the response message contains the message to be signed and the signature data;
• receiving by the first terminal the response message, obtaining a third value acquired by the second time counting when starting to receive the response message;
• verifying by the first terminal the signature data, and conducting a check on whether the third value matches with the second value, and when the signature data is verified successfully and the check on the third value passes, determining the response message to be a secure response message.