Method and system for encrypting JavaScript object notation (JSON) messages

摘要

The confidentiality of JavaScript Object Notation (JSON) message data is secured using an encryption scheme. The encryption scheme implements a JSON encryption syntax, together with a set of processing rules for creating encrypting arbitrary data in JSON messages in a platform/language independent manner. A method for encrypting a data item in a JSON message begins by applying an encryption method and a key to the data item to generate a cipher value. A data object is then constructed that represents an encryption of the data item. The data item in the JSON message is then replaced with the data object, and the resulting modified JSON message is then output from a sending entity. At a receiving entity, information in the data object is used to re-generate the data item, which is then placed back in the original message.

主权项

1. A method to secure messages deliverable over a communication network, comprising:
receiving, at an AJAX-enabled application, a JavaScript Object Notation (JSON) message comprising at least one data item; calling an encryptor function from the AJAX-enabled application to carry out a set of operations on the JSON message that include:
serializing the at least one data item into a series of bit sequences;encrypting the series of bit sequences to generate a result;associating a data type with the result to generate a data object that represents an encryption of the data item in the JSON message, the data type including information that specifies how to recover the series of bit sequences after a subsequent decryption; andreplacing the at least one data item with the data object to generate a modified JSON message; and returning the modified JSON message to the AJAX-enabled application and transmitting the modified JSON message over the communication network to another AJAX-enabled application.