Method and device for identifying legality of website service

Abstract

The invention discloses a method and a device for identifying the legality of a website service, which are used for improving access security when a user accesses the internet. The method comprises the steps of: when a client requires to use the website service, based on random numbers transmitted by the client, a server generates the corresponding temporary communication key by adopting a negotiated and appointed method, encrypts identification information by adopting the temporary communication key and transmits the encrypted identification information to the client; and the client decryptsthe received encrypted identification information by adopting a temporary communication key generated based on the same method and identifies the legality of the website service provided by the server based on the decrypted result and by adopting the preset mode. Therefore, the client can judge the legality of the website service according to the correctness of the identification information and effectively prevents information from being altered and intercepted midway, so that the security of using the website service by the user is effectively improved and the quality of the website serviceis improved. The invention also discloses the device for identifying the legality of the website service.

Description

technical field [0001] The invention relates to Internet technology, in particular to a method and device for providing and identifying the legitimacy of website services. Background technique [0002] Phishing is a kind of network hacking behavior that misleads customers to log in to fake websites through similar domain names, links, etc. to defraud customers' private information and thus make profits. With the development of e-commerce, Internet companies have gradually increased their dependence on network services, and phishing has increasingly seriously affected the security of Internet companies. [0003] Currently, the protection against phishing websites is mainly based on two modes. One is to find a phishing website and shut down a phishing website. This method has a relatively serious lag and may have caused losses, and the process of discovering a phishing website requires a lot of manual work. operation, the execution efficiency is low; another way is to reserve...

AI Technical Summary

Problems solved by technology

[0003] Currently, the protection against phishing websites is mainly based on two modes. One is to find a phishing website and shut down a phishing website. This method has a relatively serious lag and may have caused losses, and the process of discovering a phishing website requires a lot of manual work. operation, the execution efficiency is low; another way is to reserve customer information on the website, which allows customers to identify the correct website, but this way faces the combination of middlemen and phishing websites, and the client is injected The attack after the Trojan horse has no defensive effect, and the display on the webpage itself is very easy to be tampered with by cross-site scripting, so that customers cannot judge whether they are logging in to the correct website, and the security is difficult to be guaranteed

Images