HTTPS communication tunnel safety examination and content filtering system and method

Abstract

The present invention relates to a method and a system for security hypertext transmission protocol communication tunnel security checking and content filtering, which are used to check the security hypertext transmission protocol connection between a client side and a sever side. The method comprises the steps that, step one, a security hypertext transmission protocol proxy server forwards the digital certificate in security hypertext transmission protocol connection data to a digital certificate analysis device; step two, the digital certificate analysis device compares the digital certificate in the security hypertext transmission protocol connection data with the digital certificate stored, if the digital certificate transmitted by the security hypertext transmission protocol proxy server belongs to a digital certificate white list tabulation, step three is performed; step three, the security hypertext transmission protocol proxy server leads the client side and the sever side to be connected directly.

Description

technical field [0001] The invention relates to a computer network system, in particular to an HTTPS (safe hypertext transfer protocol) communication tunnel safety inspection and content filtering system. Background technique [0002] In the previous HTTPS communication tunnel security inspection and content filtering system, as shown in Figure 1, the HTTPS proxy server decrypts the HTTPS connection content, and the security inspection and content filtering device processes the decrypted data and returns the processed data to HTTPS proxy server, and the HTTPS proxy server encrypts it and sends it out. The US patent application US20030131256A1 provides a detailed technical solution. In the above prior art, the HTTPS connection is decrypted into plaintext at the HTTPS proxy server. This creates the danger that sensitive data may be leaked. For example, when a user visits the bank's website, their account information and password are decrypted into plain text at the HTTPS pro...

AI Technical Summary

Problems solved by technology

This creates the danger that sensitive data could be leaked

For example, when a user visits the bank's website, their account information and password are decrypted into plain text at the HTTPS proxy server, and the user's account information and password may be leaked at the HTTPS proxy server, which poses a security risk to the system

Images