Communication method, server and terminal based on HTTP (Hypertext Transfer Protocol)

Abstract

The application provides a network communication method, a system, a server and a terminal based on HTTP (Hypertext Transfer Protocol), aiming at resisting replay attack in HTTP network communication. The network communication method comprises the steps of sending a first time stamp to the terminal according to a terminal request; receiving network request information sent by the terminal, wherein the network request information includes the first time stamp and corresponding time stamp ciphertext, and the time stamp ciphertext is generated by encrypting algorithm factor containing the first time stamp according to a preset encryption algorithm at the terminal; and verifying whether the time stamp ciphertext is in effect or not according to the preset encryption algorithm, if no, judging the network request information is an invalid request. By verifying the validity and effectiveness of the time stamp ciphertext containing time stamp information, the possibility that the time stamp information in the network request is tampered can be further prevented, and occurrence of network replay attack can be avoided.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a hypertext transfer protocol-based communication method, server, and terminal. Background technique [0002] At present, as the Internet affects people's daily work and life more and more deeply, the security of data communication based on the Internet is particularly important. [0003] Among various factors affecting network communication security, replay attacks (Replay Attacks) are one of the most common attack methods. Replay attacks, also known as replay attacks, replay attacks, or freshness attacks, refer to attackers using network monitoring or other methods to steal authentication credentials, and then resend the disguised data packets to the server to achieve deception. purpose of the system. It is mostly used in the identity authentication process, destroying the correctness of authentication. This kind of attack repeats a valid data transmission...

AI Technical Summary

Problems solved by technology

[0006] Based on the above reasons, once the request information between the terminal and the server is intercepted during the data transmission process, since the server does not record any relevant information such as the status of the request, it is impossible to identify whether the request is intercepted and replayed, and it is unavoidable. Occurrence of replay attacks

Images