A Method of Long Connection Anti-replay Attack

Abstract

The invention particularly relates to a long connection anti-replay attack method. In this long connection anti-replay attack method, the client connects to the server, and the server returns a random number to the client; the client uses the composite key to perform HMAC calculation on the password used by the client user, and combines the plaintext of the user name and The HMAC calculation result of the client is sent to the server; after receiving the HMAC calculation result of the client, the server queries the password used by the corresponding client user, and also uses the composite key to pair the password of the corresponding client user on the server. Use the password to perform HMAC calculation; compare the HMAC calculation results obtained by the server and the client, and if the comparison results are consistent, the connection will be maintained, otherwise the connection will be disconnected. The long connection anti-replay attack method overcomes the shortcomings of common anti-replay attack methods, realizes anti-replay attack on long connection, has good effect and wide application range.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a method for preventing replay attacks of long connections. Background technique [0002] Replay Attacks, also known as replay attacks, replay attacks, or Freshness Attacks, refer to the attacker sending a packet that has been received by the destination host, especially in the authentication process, used to authenticate the identity of the user. Received packets to achieve the purpose of deceiving the system, mainly used in the identity authentication process, destroying the security of authentication. [0003] A replay attack is a type of attack. This attack repeats a valid data transmission maliciously or fraudulently. The replay attack can be carried out by the initiator intercepting and resending the data to the destination host. Attackers use network monitoring or other methods to steal authentication credentials, usually cookies or some authentication sessio...

Images