A method and device for secure data transmission based on http
A technology of data security and transmission method, applied in the field of data security transmission, can solve problems such as increasing the development cycle and cost of Web products, affecting system security, and data tampering.
Active Publication Date: 2020-09-15
GUANGZHOU XUANWU WIRELESS TECH CO LTD
View PDF5 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0002] At present, TLS is usually used to establish an encrypted channel between the client and the server, and then the HTTP protocol is used to transmit data over the TLS channel. However, since the HTTP transport protocol is stateless, data may be insecure during transmission. Factors, such as hijacking xss attacks through cookies, maliciously modifying packets through proxy routing, etc., lead to malicious tampering of data during transmission, affecting the security of the system composed of the client and server, thus making Web products In the process of research and development, if the security of the system is considered and related security policies are implemented, the cycle and cost of Web product development will be increased
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0059] The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.
[0060] see figure 1 , which is a flow chart of an HTTP-based secure data transmission method provided in an embodiment of the present invention, the HTTP-based secure data transmission method comprising:
[0061] S01: The client domain module intercepts the request data sent by the client to the server;
[0062] S02: The client domain module performs superimposition processing on multiple encryption algorithms obtained from the storage unit of the client domain mo...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses a data security transmission method and a data security transmission device based on HTTP. The method comprises the steps as follows: a client domain module adopts a first encryption algorithm model to encrypt a url parameter or body data in intercepted request data, signs the request data, generates encrypted request data and sends the encrypted request data to a server; agateway module intercepts the encrypted request data to decrypt, acquires the request data and sends the request data to the server; a gateway module adopts a second encryption algorithm model to encrypt the url parameter or the body data in intercepted response data returned by the server to a client in response to the request data, signs the response data, generates encrypted response data andsends the encrypted response data to the client; and the client domain module intercepts and decrypts the encrypted response data, acquires the response data and sends the response data to the client.According to the method, the data can be effectively prevented from being attacked during a transmission process, and thus the data is prevented from being maliciously tampered during the transmission process, and the security of a system composed of the client and the server is improved.
Description
technical field [0001] The invention relates to the technical field of data security transmission, in particular to an HTTP-based data security transmission method and device. Background technique [0002] At present, TLS is usually used to establish an encrypted channel between the client and the server, and then the HTTP protocol is used to transmit data over the TLS channel. However, since the HTTP transport protocol is stateless, data may be insecure during transmission. Factors, such as hijacking xss attacks through cookies, maliciously modifying packets through proxy routing, etc., lead to malicious tampering of data during transmission, affecting the security of the system composed of the client and server, thus making Web products During the R&D process, if system security is considered and related security policies are implemented, the cycle and cost of Web product R&D will be increased. Contents of the invention [0003] The purpose of the present invention is t...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06H04L9/14H04L9/06H04L29/08
CPCH04L9/0643H04L9/14H04L63/0428H04L67/02
Inventor 梁剑东陈鑫李海荣
Owner GUANGZHOU XUANWU WIRELESS TECH CO LTD