Secret communication method and system for HTTP

The invention provides a secret communication method and system for HTTP (Hyper Text Transport Protocol), and the scheme comprises the steps: automatically generating an sm4 key when a data request is carried out, encrypting plaintext data contained in a current request based on the sm4 key, and obtaining first encrypted request data; wherein the plaintext data is an interface parameter; encrypting the request time range by adopting an sm4 key to obtain second encrypted request data; encrypting the sm4 secret key by adopting a pre-stored sm2 public key to obtain third encryption request data; acquiring the plaintext data and a data abstract of a request time range by adopting an sm3 algorithm; combining the first encrypted request data, the second encrypted request data, the third encrypted request data and the data abstract, and sending the combined data to a response end in the form of a request message; and receiving a response message corresponding to the request message from the response end, and decrypt