如何保证网络传输的数据安全性？

参数明文
{
 key : miwenKey,
 data : miwenData
}

实际请求
{
 data : “上述json进行base64编码后的字符串”
}

public function myMessage($data, $status = "success")
{
    $aes = new AesSecurity(); //对称加密
    $rsa = new RsaService(); //非对称加密

    //1，随机生成一个多位由数字字母组成的字符串作为本次请求的AES128密钥 16位
    $aes_key = randomkeys(16);
    //2. 使用上述密钥对本次请求的参数进行AES128加密，得到请求参数密文，得到密文miwenData
    $miwenData = $aes::encrypt(json_encode($data),$aes_key);
    //3. 使用前后端约定的RSA公钥对1中的密钥加密,得到miwenKey
    $miwenKey = $rsa->publicEncrypt($aes_key);
    //4. base64转码
    $data = base64_encode(json_encode([
        'key'=>$miwenKey,
        'data'=>$miwenData,
    ]));

    return Response::json($data,$this->getStatusCode(),$header=[]);
}

public function aesData(BaseFormRequest $request)
{
    //解密数据
    $data = $request->post('data','');
    $data = json_decode(base64_decode($data),true);

    $key = $data['key'];
    $data = $data['data'];

    $aes = new AesSecurity(); //对称加密
    $rsa = new RsaService(); //非对称加密
    //1.使用前后端约定的RSA私钥key解密,得到miwenKey（因为客户端使用公钥加密，所以服务端使用公钥解密）
    $miwenKey = $rsa->privateDecrypt($key);
    //2.使用上述miwenKey对本次请求的data参数进行AES128解密，得到请求参数密文miwenData
    $miwenData = $aes::decrypt($data,$miwenKey);
    //3.将json字符串转成数组
    $data = json_decode($miwenData,true);

    //todo 打开时间戳校验
    $time = $data['time'];
    //超过30秒校验失败不允许继续操作
    if ($time<time()-30){
        throw new Exception('访问超时，不允许操作');
    }

    return $data;
}

public function create(LoginRequest $request)
{
    //解密数据
    $data = $request->aesData($request);

    $name = $data['name'];
    $password = $data['password'];

     .
    .
    .
}

<?php
/**
 * [AesSecurity aes加密，支持PHP7.1]
 */
class AesSecurity
{
    /**
     * [encrypt aes加密]
     * @param [type]     $input [要加密的数据]
     * @param [type]     $key [加密key]
     * @return [type]       [加密后的数据]
     */
    public static function encrypt($input, $key)
    {
        $data = openssl_encrypt($input, 'AES-128-ECB', $key, OPENSSL_RAW_DATA);
        $data = base64_encode($data);
        return $data;
    }
    /**
     * [decrypt aes解密]
     * @param [type]     $sStr [要解密的数据]
     * @param [type]     $sKey [加密key]
     * @return [type]       [解密后的数据]
     */
    public static function decrypt($sStr, $sKey)
    {
        $decrypted = openssl_decrypt(base64_decode($sStr), 'AES-128-ECB', $sKey, OPENSSL_RAW_DATA);
        return $decrypted;
    }
}

<?php

namespace App\Services;

use Exception;

class RsaService
{
    /**
     * 公钥
     * @var
     */
    protected $public_key;


    /**
     * 私钥
     * @var
     */
    protected $private_key;


    /**
     * 公钥文件路径
     * @var
     */
    protected $public_key_path = '../keys/rsa_public_key.pub';


    /**
     * 采用pkcs8只是为了方便程序解析
     * 私钥文件路径
     * @var
     */
    protected $private_key_path = '../keys/rsa_private_key_pkcs8.pem';


    /**
     * 初始化配置
     * RsaService constructor.
     * @param bool $type 默认私钥加密
     */
    public function __construct($type = true)
    {
//        if ($type) {
            $this->private_key = $this->getPrivateKey();
//        } else {
            $this->public_key = $this->getPublicKey();
//        }
    }


    /**
     * 配置私钥
     * openssl_pkey_get_private这个函数可用来判断私钥是否是可用的，可用，返回资源
     * @return bool|resource
     */
    private function getPrivateKey()
    {
        $original_private_key = file_get_contents(__DIR__ . '/../' . $this->private_key_path);
        return openssl_pkey_get_private($original_private_key);
    }


    /**
     * 配置公钥
     * openssl_pkey_get_public这个函数可用来判断私钥是否是可用的，可用，返回资源
     * @return resource
     */
    public function getPublicKey()
    {
        $original_public_key = file_get_contents(__DIR__ . '/../' . $this->public_key_path);
        return openssl_pkey_get_public($original_public_key);
    }


    /**
     * 私钥加密
     * @param $data
     * @param bool $serialize 是为了不管你传的是字符串还是数组，都能转成字符串
     * @return string
     * @throws \Exception
     */
    public function privateEncrypt($data, $serialize = true)
    {

        $data = substr($data,0,30);
        openssl_private_encrypt(
            $serialize ? serialize($data) : $data,
            $encrypted, $this->private_key
        );
        if ($encrypted === false) {
            throw new \Exception('Could not encrypt the data.');
        }
        return base64_encode($encrypted);
    }


    /**
     * 私钥解密
     * @param $data
     * @param bool $unserialize
     * @return mixed
     * @throws \Exception
     */
    public function privateDecrypt($data, $unserialize = true)
    {
        openssl_private_decrypt(base64_decode($data),$decrypted, $this->private_key);

        if ($decrypted === false) {
            throw new \Exception('Could not decrypt the data.');
        }

        return $unserialize ? unserialize($decrypted) : $decrypted;
    }


    /**
     * 公钥加密
     * @param $data
     * @param bool $serialize 是为了不管你传的是字符串还是数组，都能转成字符串
     * @return string
     * @throws \Exception
     */
    public function publicEncrypt($data, $serialize = true)
    {
        openssl_public_encrypt(
            $serialize ? serialize($data) : $data,
            $encrypted, $this->public_key
        );
        if ($encrypted === false) {
            throw new \Exception('Could not encrypt the data.');
        }

        return base64_encode($encrypted);
    }


    /**
     * 公钥解密
     * @param $data
     * @param bool $unserialize
     * @return mixed
     * @throws \Exception
     */
    public function publicDecrypt($data, $unserialize = true)
    {
        openssl_public_decrypt(base64_decode($data),$decrypted, $this->public_key);

        if ($decrypted === false) {
            throw new \Exception('Could not decrypt the data.');
        }

        return $unserialize ? unserialize($decrypted) : $decrypted;
    }
}

// 第一步：生成私钥，这里我们指定私钥的长度为1024, 长度越长，加解密消耗的时间越长
openssl genrsa -out rsa_private_key.pem 1024

// 第二步：根据私钥生成对应的公钥
openssl rsa -in rsa_private_key.pem -pubout -out rsa_public_key.pub

// 第三步：私钥转化成pkcs8格式，【这一步非必须，只是程序解析起来方便】
openssl pkcs8 -topk8 -inform PEM -in rsa_private_key.pem -outform PEM -nocrypt -out rsa_private_key_pkcs8.pem