Data transmission method based on network communication, client and server

Abstract

The invention discloses a data transmission method based on network communication. The method comprises the following steps: the client encrypts to-be-transmitted original data according to a preset encryption mode, and a ciphertext is generated; the client transmits the ciphertext to the corresponding server based on a secure socket layer protocol to enable the server to decrypt the received ciphertext according to a preset decryption mode, and the original data are acquired. The invention also discloses a client and a server. The to-be-transmitted original data themselves are subjected to encryption processing, the ciphertext after the original data are encrypted is transmitted based on an SSL security defense strategy, and double encryption defense is carried out from an external network communication layer and the original data themselves. Even if the SSL security defense strategy fails completely, as the original data themselves are subjected to encryption processing, plaintext exposure is not caused, leakage of the original data is prevented, and the data transmission security based on network communication is effectively improved.

Description

technical field [0001] The invention relates to the technical field of network communication, in particular to a data transmission method based on network communication, a client and a server. Background technique [0002] At present, the commonly used network communication security technology in data transmission based on network communication is the SSL security defense strategy such as HTTPS, etc. The SSL security defense strategy is aimed at the entire network communication layer, tunneling the network communication, and all the data in the tunnel is in the It is transmitted in the encrypted network communication layer. [0003] However, the SSL security defense strategy only encrypts the entire network communication layer, and the communication data transmitted in the network communication layer does not have any security defense means. As a result, once the security vulnerability of SSL itself makes the SSL security defense strategy completely invalid, such as the typ...

AI Technical Summary

Problems solved by technology

[0003] However, the SSL security defense strategy only encrypts the entire network communication layer, and the communication data transmitted in the network communication layer does not have any security defense measures.

As a result, once the security vulnerability of SSL itself makes the SSL security defense strategy completely invalid, such as the typical "Heartbleed" vulnerability, then all communication data transmitted in the network communication layer using the SSL security defense strategy will be exposed to hackers in plain text

Therefore, this method of relying solely on the SSL security defense strategy to protect the communication data transmitted in the network communication layer is less secure.

Images