A method for detecting whether a terminal can access the Internet

Abstract

The invention discloses a method for detecting whether a terminal can visit the Internet or not, and the method comprises the following steps: a), presetting a batch of public website URL pools, a corresponding CA certificate public key list and CA certificates, and presetting the batch of public website URL pools, the CA certificate public key list and CA certificates in a client program; b), randomly selecting two preset public website URL pools from the public website URL pools for the https connection when the access of a client to a server network is interrupted and the reconnection failsor an application performs the server connection for the first time, and employing the preset CA certificates for the verification of the authenticity of the server. The method guarantees that the client can visit the Internet in an environment without additional investment. Because the server certificates of the famous websites are private and cannot be counterfeited, the method can sense a realnetwork environment. According to the scheme, the method employs the public resources, is high in reliability, and does not need to add investment.

Description

technical field [0001] The invention relates to a method for detecting whether a terminal can access the Internet. Background technique [0002] When the client access server connection is interrupted, the client generally needs to reconnect to the network to achieve business continuity. However, in some network security scenarios, it is necessary to confirm whether the current Internet is reachable, and then perform follow-up operations such as network connection. Malicious attackers will use the local area network to simulate the Internet and use fake DNS resolution services to construct fake servers, inducing clients to initiate reconnections, and then analyze the interactive packets to find loopholes. [0003] The existing technology generally confirms whether the server is reachable by sending a keep-alive message from the client to the server, or by purchasing a server certificate and performing server verification on the client. This method is relatively easy to be h...

AI Technical Summary

Problems solved by technology

[0003] The existing technology generally confirms whether the server is reachable by sending a keep-alive message from the client to the server, or by purchasing a server certificate and performing server verification on the client. This method is relatively easy to be hijacked and false server responses Counterfeit, can not truly reflect the current network connectivity

Images