Encryption method for preventing replay attacks

Abstract

The invention provides an encryption method for preventing replay attacks. The method comprises the following steps: a transmitting end sets a current timestamp and an effective time period with the timestamp as the reference, and separately encrypts and sends plaintext and a corresponding randomly generated first random number within the effective time period, wherein the encrypted plaintext and the encrypted first random number are kept invariable within the effective time period with the timestamp as the reference; a receiving end receives and decrypts the encrypted plaintext and the corresponding first random number within the time period, wherein within the effective time period with the timestamp as the reference, all stored first random numbers are compared with the decrypted first random numbers within the effective time period one by one, if the first random numbers are all different, the encrypted plaintext and the corresponding first random number are stored, the decrypted first random number is stored, and the valid period of the decrypted first random number is recorded; and otherwise, the decrypted first random number is deleted, and the valid period of the decrypted first random number is recorded. By adoption of the encryption method provided by the invention, the replay attacks can be defended.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to an encryption method for preventing replay attacks. Background technique [0002] The first electronic computer appeared in the world in 1946, and ARPANET, the prototype of the Internet, has also appeared for decades. Electronic computers and the Internet have undergone considerable development and have spread all over the world with a large number of users, websites and other applications. With the development of the Internet, network security issues are becoming more and more serious. Intrusion and anti-intrusion, network attacks and defense measures are intensifying, and the security of the Internet is constantly being tested. Information security includes computer security and network security, and network security includes many aspects: [0003] 1. Content protection: mainly through encryption technology to prevent unauthorized access; [0004] 2. Int...

AI Technical Summary

Problems solved by technology

The disadvantage of this method is that it is difficult to find a balance between security and maintenance costs. Security requires complex maintenance, and simple maintenance lacks security.

[0030] There are many researches on the current anti-replay attack methods and replay attacks, but they all have their own defects. It is difficult to find a balance between security, operation and maintenance, and it cannot perfectly defend against replay attacks.

If the above three methods are used alone to defend against replay attacks, they all have their own defects; although the joint use strengthens security, it is difficult to take into account the performance of all aspects

Although their security is sufficient in general environments, they cannot meet the requirements for occasions with strict security requirements. At this time, we need a system that can perfectly defend against replay attacks

Images