Communication method, server and terminal based on hypertext transfer protocol

Abstract

The application provides a communication method, a server and a terminal based on a hypertext transfer protocol (HTTP), aiming to resist playback attacks in HTTP network communication. The method comprises: sending a first time stamp to a terminal under the requirement of the terminal; receiving the network request information sent by the terminal, wherein the network request information includes the first time stamp and a corresponding time stamp ciphertext, and the terminal encrypts the algorithm factor including the first time stamp according to a preset encryption algorithm to generate the time stamp ciphertext; and verifying whether the time stamp ciphertext is valid according to the preset encryption algorithm, and determining the network request information to be invalid if the time stamp ciphertext is invalid. The method can verify the legality and validity of the time stamp ciphertext including time stamp information, so as to prevent the time stamp information in a network request from being tampered, and to avoid network playback attacks.

Description

technical field [0001] The present application relates to the technical field of network security, and in particular, to a communication method, server and terminal based on a hypertext transfer protocol. Background technique [0002] At present, as the Internet increasingly affects people's daily work and life, the security of Internet-based data communication is particularly important. [0003] Among various factors that affect the security of network communication, replay attacks (ReplayAttacks) are one of the most common attack methods. Replay attack, also known as replay attack, replay attack or freshness attack (FreshnessAttacks), means that the attacker uses network monitoring or other methods to steal authentication credentials, and then re-send the disguised data packets to the server to deceive the system. the goal of. It is mostly used in the identity authentication process and destroys the correctness of the authentication. This type of attack continuously mal...

AI Technical Summary

Problems solved by technology

[0006] Based on the above reasons, once the request information between the terminal and the server is intercepted during the data transmission process, since the server does not record any relevant information such as the status of the request, it is impossible to identify whether the request is intercepted and replayed, and it is unavoidable. Occurrence of replay attacks

Images