A method for uniquely identifying a client machine in a web environment

Abstract

The invention provides a method for identifying machines in the web environment. The method comprises the following steps: a), a request sent by a web application of a client side is received; b), whether a machine identifier sent together with the request of a user is empty or not is verified, if the machine identifier is an empty string, the step c) is performed, if the machine identifier is not an empty string, the machine identifier is verified, if the machine identifier passes the verification, the step e) is performed, the machine identifier does not pass the verification, the step d) is performed; c), whether the client side has an access record is judged, identifying information of the client side is analyzed, an identification bank is searched to find that whether a matching identifier exists or not, if the matching identifier exists, the step e) is performed, and if matching identifier does not exist, the step d is performed; d), a new machine identifier is generated for the client side through the identifying information of the client side; e), the generated machine identifier is sent back to the client side and stored. According to the method provided by the invention, a client machine can be identified uniquely and effectively in the web application environment, and the security of web applications can be improved under the condition of not influencing user experience.

Description

technical field [0001] The invention relates to the field of web applications, in particular to a method for identifying and managing client machines in the web environment to prevent cheating. Background technique [0002] With the popularity of web applications and browser / server (B / S) mode applications, the security issues of web applications are also increasingly concerned. Web programs on the Internet require a large number of security mechanisms to defend against attacks. This security mechanism mainly includes processing the user's access to web functions and data to prevent unauthorized access; processing user input to prevent the user's wrong input from affecting the program; Handle hacker attacks, ensure that requests can be processed normally when attacked, block hacker attacks and deal with administrator behavior, and help administrators configure web program functions. All of these security mechanisms may become the direction of hacker attacks, thereby causing ...

AI Technical Summary

Problems solved by technology

Plug-ins need to be downloaded and installed separately by users, which not only brings security risks to users, but also makes the experience of users when using web applications too cumbersome, resulting in poor user experience

In existing web applications, if plug-ins are not used, there will be no unique identification scheme for the machine, so the management of users by the server cannot be well supported, and it is inconvenient to implement a security scheme

Images