Authentication method for preventing replay attack

Abstract

The invention discloses an authentication method for preventing a replay attack. The method comprises the following steps of transmitting an authentication evidence and service requests to an application server, wherein the authentication evidence is acquired from a login authentication server by a client side and is provided with a first time stamp; identifying the sequence of the user requests by using a unidirectional data chain; calculating the time difference between the current time and the first time stamp at the login authentication server end; packaging a judging result, the time difference and a unidirectional data chain value into verification information; and transmitting the verification information to the application server, wherein the application server judges whether the verification information is replay information or not according to the received unidirectional data chain value, and furthermore, whether the service requests are authenticated within effective time or not can be judged according to the time difference and the judging result. Time is not required to be synchronous, so that the complexity of the system or a protocol is avoided, and the delay caused by synchronization of time is also avoided. The probability that the user requests undergo the replay attack is avoided through the application of the unidirectional data chain.

Description

technical field [0001] The invention relates to the field of communication system authentication, in particular to an authentication method for preventing replay attacks. Background technique [0002] Replay Attacks, also known as replay attacks, replay attacks, or Freshness Attacks, refer to the attacker sending a packet that has been received by the destination host to deceive the system. It is mainly used in the identity authentication process , destroying the correctness of the authentication. A replay attack will continuously maliciously or fraudulently repeat a valid data transmission. The attacker uses network monitoring or other methods to steal the authentication credentials, and then resends them to the authentication server to destroy the security of the authentication. For example, intercepting cookies by listening to http data transmission or other means and submitting cookies is a kind of replay attack, which can easily copy other people's cookies to obtain co...

AI Technical Summary

Problems solved by technology

If a special time synchronization protocol is used, it may lead to more complex communication protocols or systems to increase system instability; if a loose time synchronization method is used, that is, by performing a three-way handshake between two services, and then the server calculates them The maximum difference between the time, the system or protocol needs to be able to tolerate a certain period of delay or out of synchronization, but in some systems or protocols, this kind of delay or out of synchronization is not allowed

Images