Anti-replay attack method, and related apparatuses

Abstract

The embodiment of the invention discloses an anti-replay attack method, a sending end, a receiving end, a corresponding computer device and a program product. The method disclosed by the embodiment ofthe invention comprises the following steps: when the sending end needs to send target information to the receiving end, the sending end uses anti-replay information and the target information as plaintext information, wherein the anti-replay information is applied to anti-replay attack verification; the sending end performs digital signature on the plaintext information to obtain corresponding signature information; and the sending end sends the plaintext information and the signature information to the receiving end, so that the receiving end performs signature verification on the plaintextinformation according to the signature information, and after the signature verification is passed, the receiving end performs anti-replay attack verification on the target information according to the anti-replay information.

Description

technical field [0001] The present invention relates to the communication field, in particular to a method for preventing replay attacks, a sending end, a receiving end, computer equipment, and program products. Background technique [0002] Replay attacks, also known as replay attacks or freshness attacks, refer to attackers intercepting and resending a packet that a target host has received to achieve the purpose of deception. This attack repeatedly maliciously or fraudulently repeats a valid data transmission. Attackers use network monitoring or other methods to steal authentication credentials, and then resend them to the destination host, mainly destroying the authentication process of the destination host, and replay attacks may occur in any network communication process. At present, various communication devices of network services are often subjected to replay attacks by attackers, which is one of the common attack methods used by hackers. Therefore, how to effectiv...

AI Technical Summary

Problems solved by technology

[0004] However, in the above-mentioned prior art, whether it is based on time stamp, random number and other anti-replay attack methods, the use of encryption technology to encrypt plaintext information can only ensure the confidentiality of plaintext information, which is a combination of defense and encryption. , because the encryption technol...

Images