Method and system for verifying a server

Abstract

An embodiment of the invention provides a method and system for verifying a server, and relates to the field of network security technology. The method comprises: sending service request, which contains service content identifying information, to the server so that the server can obtain the corresponding service content; receiving a content providing message sent by the server, wherein the content providing message contains the service content corresponding to the service content identifying information and encrypted string that is obtained after the server encrypts key content; decrypting the key content from the encrypted string; verifying whether the key content is legal; and if the key content is legal, determining that the server passes the verification. The method and system are mainly used for verifying the server, especially a text protocol server.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a method and a system for verifying the legality of a server. Background technique [0002] With the continuous development of network technology, more and more businesses can be operated on the network, such as online shopping, online banking, etc., especially online shopping and online banking, which involve people's property transactions. Therefore, for servers The verification of legitimacy is particularly important. [0003] In order to ensure the security of network services, there are the following two solutions in the prior art: [0004] Solution 1, Https (HypertextTransferProtocoloverSecureSocketLayer) solution: apply for a certificate from a CA (CertificateAuthority, digital certificate certification center) to prove the type of use of the server. The client only trusts the host if the certificate is used for the corresponding server. Therefore, all current ...

AI Technical Summary

Problems solved by technology

[0006] Disadvantages of Option 1: low development efficiency, complex positioning problems, and unfavorable for continuous operation

Since the communication protocol adopted by Https is encrypted, the server and the client need to convert the text protocol additionally, the development efficiency is low, and when a fault occurs, the location is complicated, and the information cannot be intuitively obtained from the transmission content, which is not conducive to continuous operation

[0007] Disadvantages of Option 2: Operational operations such as server host change and capacity expansion are inflexible

Since the IP of the server host is hard-coded locally on the client, if the address of the server host needs to be changed, it is necessary to update the hard-coded IP list of all clients, and the workload and response speed are very problematic.

Images