Request authentication method and system

Abstract

The invention discloses a request authentication method. The method comprises the steps of obtaining preset token information contained in a request when the request initiated by a target client is received; obtaining an encryption key in a configuration file, and decrypting and decoding the preset token information according to the encryption key, thereby obtaining signature information; judgingwhether the signature information is the same as preset target signature information or not; authenticating the request successfully if the signature information is the same as the preset target signature information; and authenticating the request unsuccessfully if the signature information is different from the preset target signature information. According to the authentication method, the authentication is carried out through utilization of the preset token information of the client, and the information does not need to be stored by a server. The problem that each time when the request isinitiated, session storage request information needs to be established at the server, when more and more clients initiate the requests, the cost of the memory of the server is continuously increased,and an authentication process also can be congested is avoided.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a request authentication method and system. Background technique [0002] In the network communication process, the premise that the client and the server can communicate is that the server must verify the request sent by the client, and the verification is successful. In the prior art, every time the client initiates a request, the server will create a Seesion to store the request information, and verify the identity of the client according to the request information. [0003] The inventor researched the existing request verification process and found that every time a request is made, a Session will be created on the server side to store the request information. When more and more clients initiate requests, the memory overhead of the server will also continue to increase. And it will also cause congestion in the verification process. Contents of the invention [00...

AI Technical Summary

Problems solved by technology

[0004] In view of this, the present invention provides a request authentication method and system to solve each request in the prior art, a Session will be created on the server side to store the request information, when more and more clients initiate requests , the overhead of server memory will continue to increase, and it will also cause congestion in the verification process

Images