WAP-based method and WAP-based system for controlling accesses to SP

Abstract

The invention discloses a WAP-based method and a WAP-based system for controlling accesses to SP, which set black lists and white lists for the SP access parameters to allow eligible user requests passing through the filtration of the black lists and the white lists to be processed on a WAP gateway after the SP gives a response, thereby improving the safety of a WAP application system. In addition, flexible configuration of access control policies can be realized through a multi-step access control of setting the black and white lists and priority for a plurality of SP access parameters. The invention also provides a processing mechanism for controlling the accesses to an accessed content expanded-name parameter and an SP feedback content type parameter respectively, which avoids fraudulent conducts in accesses to the SP.

Description

technical field [0001] The invention relates to an SP (Service Provider) access control technology, in particular to an SP access control strategy technology based on WAP (Wireless Application Protocol). Background technique [0002] There are many unsafe factors on the current network. Users may be infected with viruses or malicious programs if they do not pay attention when surfing the Internet. Sometimes even some seemingly safe operations may lead to such unsafe consequences. There are basically two types of unsafe situations: [0003] 1. For the user's normal request, the content returned by the SP contains malicious scripts or malicious programs, causing the user end to be infected with viruses or malicious programs. For example: a user wants to browse a normal web page in a browser, but after opening it, it is a malicious script, or downloads a normal text file, but what is actually downloaded is a malicious program. This is insecure due to lack of control over what...

AI Technical Summary

Problems solved by technology

This is due to the insecurity caused by the lack of control over the content returned by the SP

[0004] 2. In addition, users may initiate requests to some high-risk SPs for some reasons

If there is no access control for user-initiated requests, it will also affect customers due to the insecurity of the accessed SP

[0005] Regarding the unsafe factors in the above two situations, there is still a lack of an access control technology that can be flexibly configured in the prior art, and no patent application for a similar technology has been found after a patent search

Images