Method and device for controlling access request on basis of proxy gateway

Abstract

The invention relates to the field of communication and discloses a method for controlling an http access request on the basis of a proxy gateway. The method is used for increasing the safety of a proxy gateway application system. The method comprises the following steps of: receiving an https access request for establishing TLS (Transport Layer Security Protocol) connection sent by a terminal by the proxy gateway; judging if a binary set control parameter carried by the https access request is legal by the proxy gateway according to a preset screening strategy; if yes, allowing the terminal to establish TLS connection through the https access request; and if not, refusing the terminal to establish TLS connection through the https access request. Thus, the preset binary set control parameter can be used for flexibly managing and controlling the https access request for establishing TLS connection, the illegal TLS connection is effectively blocked, more flexible protective measures are supplied to a proxy gateway running system, and the safety and flexibility of a service control flow of the proxy gateway are increased.

Description

technical field [0001] The invention relates to the communication field, in particular to a method and device for controlling based on Https access requests. Background technique [0002] With the development of Internet technology, users' demand for larger-scale and richer-form services on the Internet is also growing. At present, WAP (Wireless Application Protocol, wireless application protocol) gateway is usually used as the Internet proxy of terminal users. The most basic function of WAP gateway is to act as a proxy server for terminals, proxying terminals to access WAP websites and Internet content, and providing basic http proxy services And the protocol conversion function of WAP1.x. In order to protect the user's private data, the WAP gateway provides an encrypted data access channel requested by https, called the TLS (Transport Layer Security Protocol, Transport Layer Security Protocol) tunnel, and the user negotiates the key through the two ends of the TLS tunnel....

AI Technical Summary

Problems solved by technology

[0003] However, the https (referring to the http service encrypted with TLS) proxy service has its own defects, that is, the HTTP CONNECT proxy server is a proxy server that allows users to establish a TCP connection to any port, which means that this proxy can not only be used for http Proxy service can also be used for FTP, IRC, RM streaming services, etc., and can even be used for scanning and attacking. For example, the terminal can take advantage of the defect that the WAP gateway cannot process Https request data, and use the HTTP CONNECT proxy to monitor important systems of the WAP gateway. Scanning, attacking, etc.

Images