A Method for Achieving Integrity and Confidentiality of User Data

Abstract

The present invention discloses a method for realizing user data integrity and confidentiality without modifying a web service system, relating to the field of information security. Through an HTTP protocol filtering device configured with a certain strategy, according to an HTTP request, response data and a predetermined strategy, an electronic evidence which proves a user operation and a server end recognized behavior is automatically generated, and an electronic evidence for followed proof is stored. According to the method, the integrity of service system key data is realized, a user and a server obtain and store needed electronic evidences, and the evidences can be provided in future disputes. The confidentiality of service system critical data is realized, encrypted forms are employed by user table data, client data and server end data in the process of transfer, the illegal interception and leakage of the data are prevented. The modification of the service system is not needed, the competition can be achieved through only deploying and configuring the HTTP filtering device, and the method is simple and convenient and has a good universal property.

Description

technical field [0001] The invention belongs to the field of information security and relates to a method for realizing the integrity and confidentiality of user data without modifying a Web service system. Background technique [0002] With the rapid popularization and in-depth application of Web technology in various fields, how to protect the security of Web systems has become an increasingly concerned issue, and protecting the integrity and confidentiality of user data is an important content of Web security. [0003] At present, the popular method is implemented by SSL (Secure Sockets Layer) technology, which is a security protocol that provides security and data integrity for network communication. The secure channel provided by the SSL protocol has the following three characteristics: [0004] Confidentiality: Use keys to encrypt communication data to prevent data from being stolen midway. [0005] Reliability: Both the server and the client are authenticated. [0...

AI Technical Summary

Problems solved by technology

[0012] In other words, the SSL protocol only guarantees the integrity of the transmission process, and does not provide electronic evidence for subsequent proof

[0013] On the other hand, some systems adopt the method of modifying the business system to deeply integrate electronic signature technology to realize functions such as generation, verification, storage, and evidence collection of electronic evidence. It needs to be customized and developed according to the business system, and the workload is heavy, so it is impossible to form a general solution.

Images