Method, device, medium and apparatus for CDN inter-node encryption

1. A method for content delivery network (CDN) inter-node encryption comprising:

receiving, by a CDN node, a symmetric key set and a key index from a key center;

determining, by the CDN node, a key from the symmetric key set according to the key index; and

performing, by the CDN node, encryption and decryption processing using the key when performing Hyper Text Transfer Protocol (HTTP) data transmission with another CDN node;

wherein the symmetric key set is stored in a memory of the key center but not in a fixed storage medium; and

wherein receiving the symmetric key set and the key index from the key center includes:

receiving, at a first time interval, the key index, the key index being generated randomly or according to a preset index generation algorithm; and

receiving, at a second time interval greater than the first time interval:

the symmetric key set, the symmetric key set being generated randomly or according to a preset key generation algorithm, or

the symmetric key set and the key index.

2. The method according to claim 1 , wherein:

receiving the symmetric key set and the key index comprises receiving the symmetric key set and the key index through an encrypted channel.

3. The method according to claim 1 , wherein:

the CDN node is an edge node and the other CDN node is a parent node; and

performing the encryption and decryption processing using the key includes:

encrypting an HTTP request using the key;

sending the encrypted HTTP request to the parent node;

receiving an HTTP response from the parent node; and

decrypting the HTTP response using the key.

4. The method according to claim 1 , wherein:

the CDN node is a parent node and the other CDN node is an edge node; and

performing the encryption and decryption processing using the key includes:

receiving an HTTP request from the edge node;

decrypting the HTTP request using the key;

encrypting an HTTP response using the key; and

sending the encrypted HTTP response to the edge node.

5. The method according to claim 1 , wherein:

the key index has a range of [x,y], x and y being integers; and

a number of symmetric keys in the symmetric key set equals one plus a difference between y and x.

6. The method according to claim 1 , wherein receiving the symmetric key set and the key index from the key center includes:

receiving, at the first time interval, the key index that is generated randomly or according to the preset index generation algorithm; and

receiving, at the second time interval greater than the first time interval, the key index and the symmetric key set that is generated randomly or according to the preset key generation algorithm.

7. An apparatus for content delivery network (CDN) inter-node encryption comprising:

a memory storing computer programs; and

a processor configured to execute the computer programs to:

generate, at a first time interval, a key index randomly or according to a preset index generation algorithm;

generate, at a second time interval greater than the first time interval:

a symmetric key set randomly or according to a preset key generation algorithm, or

the symmetric key set and the key index; and

send the symmetric key set and the key index to one or more CDN nodes;

wherein the symmetric key set is stored in a memory of a key center but not in a fixed storage medium.

8. The apparatus according to claim 7 , wherein the processor is further configured to execute the computer programs to:

send the symmetric key set and the key index to each of the one or more CDN nodes through an encrypted channel.

9. The apparatus according to claim 8 , wherein:

the key index has a range of [x,y], x and y being integers; and

a number of symmetric keys in the symmetric key set equals one plus a difference between y and x.

10. An apparatus for content delivery network (CDN) inter-node encryption comprising:

a memory storing computer programs; and

a processor configured to execute the computer programs to:

receive a symmetric key set and a key index from a key center;

determine a key from the symmetric key set according to the key index; and

perform encryption and decryption processing using the key when performing Hyper Text Transfer Protocol (HTTP) data transmission with another CDN node;

wherein the symmetric key set is stored in a memory of the key center but not in a fixed storage medium;

wherein, at a first time interval, the key index is generated randomly or according to a preset index generation algorithm; and

wherein at a second time interval greater than the first time interval:

the symmetric key set is generated randomly or according to a preset key generation algorithm, or

the symmetric key set and the key index are generated.

11. The apparatus according to claim 10 , wherein the processor is further configured to execute the computer programs to:

encrypt an HTTP request using the key;

send the encrypted HTTP request to the other CDN node;

receive an HTTP response from the other node; and

decrypt the HTTP response using the key.

12. The apparatus according to claim 10 , wherein the processor is further configured to execute the computer programs to:

receive an HTTP request from the other CDN node;

decrypt the HTTP request using the key;

encrypt an HTTP response using the key; and

send the encrypted HTTP response to the other CDN node.

13. The apparatus according to claim 10 , wherein:

the key index has a range of [x,y], x and y being integers; and

a number of symmetric keys in the symmetric key set equals one plus a difference between y and x.

14. A non-transitory computer-readable storage medium storing computer programs that, when executed by a processor, implement the method according to claim 1 .

15. A non-transitory computer-readable storage medium storing computer programs that, when executed by a processor, implement the method according to claim 2 .

16. A non-transitory computer-readable storage medium storing computer programs that, when executed by a processor, implement the method according to claim 3 .

17. A non-transitory computer-readable storage medium storing computer programs that, when executed by a processor, implement the method according to claim 4 .

18. A non-transitory computer-readable storage medium storing computer programs that, when executed by a processor, implement the method according to claim 5 .