Flow control mechanism suitable for online identity authentication

Abstract

The invention relates to the technical field of information security, and discloses a flow control mechanism suitable for online identity authentication. The mechanism provides a strict flow management and control method for online identity authentication, namely after a marking client browser is locked, strict read-write management and control are carried out on a Session object in a communication session, and strict verification management and control are carried out on Cookies contents, therefore even if the Session ID or Coolies contents and other information are leaked, the hackers can also be prevented from posing the identities of legal users by using these resources to prevent the further leakage of the user information, thereby greatly reducing the possibility of information leakage and hacker attacks, and ensuring the security of the online identity authentication process.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a flow control mechanism suitable for online identity authentication. Background technique [0002] In order to ensure the security of access between sites, the common practice in the current Internet communication process is: first rely on the interceptor to intercept the URL (Uniform Resource Locator, Uniform Resource Locator) address, and forward it to User login process, and after the user enters information related to identity credentials (such as account and account password, etc.), the authentication server performs authentication matching. If the authentication is successful, a memory-based authorized resource sharing object will be established between the client and the server. (such as the Session object, etc.), and write part of the information of the authorized resource sharing object into the temporary cache file (such as the Cookies file) of the client....

AI Technical Summary

Problems solved by technology

However, due to the lack of strict process control of the online identity authentication process (that is, the user login process) and strict read and write control of authorized resource sharing objects, hackers can use the HTTP protocol (HyperText Transfer Protocol, hypertext transfer protocol) stateless That is, the connectionless feature, and uses the authorized resource sharing object obtained from the air interface interception or the temporary cache file read by illegal intrusion to forcibly impersonate the identity of a legitimate user to achieve the purpose of man-in-the-middle attack, so that the current online identity authentication process has certain flaws. Security risks