Protection method and protection system of common gateway interface business

Abstract

The invention provides a protection method and a protection system of a common gateway interface (CGI) business. The method comprises that a first CGI receives a first business request from a client side and sends encrypted strings to the client side, a second CGI receives a second business request from the client side and verifies whether the second business request includes the encrypted strings, if so, the verification is passed through, and a second business response is sent to the client side. The protection method and the protection system of the common gateway interface business can guarantee the safety of the common gateway interface business under the premise of reducing the number of the verification of verification codes.

Description

technical field [0001] The invention relates to security protection technology, in particular to a protection method and system for universal gateway interface services. Background technique [0002] Generally, a Common Gateway Interface (CGI, Common Gateway Interface) service is completed by cooperation of multiple CGIs on the server. CGI is on the server and provides an interface for the client to request data. [0003] For the convenience of description, a CGI service requires the cooperation of two CGIs on the server to complete the description below. The execution process of the CGI service includes: the client sends the first service request to the server, and CGI1 on the server executes the first service request. processing, returning the first service response to the server; the client sends the second service request to the server after receiving the first service response, and the CGI2 on the server processes the second service request and returns the second servi...

AI Technical Summary

Problems solved by technology

[0008] This method has the following defects: it is necessary to establish a frequency limit system on the server, the development is complicated, a large storage space is required, and the cost is high, and it is judged whether to deny access based on the user's access record, which may cause misjudgment

[0010] The verification code technology greatly damages the user experience, especially in complex web applications, where a CGI service operation needs to initiate multiple CGI service requests to the server. Correspondingly, if these CGI service requests are protected by verification codes, users need Enter verification code multiple times

If the number of verification code verifications is reduced and only the first business request is verified, there will be malicious traversal behaviors in which the user modifies user name B and adds other users, or even adds multiple other users, during the second friend addition operation, resulting in CGI The security of the business is affected

[0011] It can be seen that although verification code technology can save development costs, it cannot guarantee security under the premise of reducing the number of verifications

Images