Data processing method, device, access control device, authentication server and system

Abstract

The invention relates to a data processing method, device, access control equipment, authentication server and system. The method is applied to an access control device, and the method includes: intercepting an HTTP request from an unauthenticated terminal; obtaining characteristic parameters related to the HTTP request; adding a timestamp to the characteristic parameter to obtain the processed characteristic parameter, and using the The key shared by the authentication server encrypts the processed characteristic parameters to obtain encrypted ciphertext parameters; the ciphertext parameters and the address of the authentication server are encapsulated into a jump message and returned to the terminal. Obtain the characteristic parameters in the HTTP request by intercepting the HTTP request of the unauthenticated terminal and encrypt the characteristic parameter with the time stamp to obtain the encrypted ciphertext parameter, so that the authentication server can obtain the characteristic parameter through decryption and control the terminal's request , so as to prevent malicious attacks on the terminal, and make each request of the terminal traceable, identifiable, and controllable.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a data processing method, device, access control equipment, authentication server and system. Background technique [0002] As the requirements for network security are getting higher and higher, for some network attacks, the corresponding network service providers need to have a certain ability to prevent attacks. However, in the current construction project of the wireless WiFi system, only attention is paid to whether the wireless service is stable and available. The service center that provides authentication services, content services, etc. is completely open to wireless access terminals, and the corresponding services can be accessed at will. risk of attack. For example: For the authentication service interface, a hacker can brute force crack the user name and password by simulating the authentication message. For the short message service interface, ...

AI Technical Summary

Problems solved by technology

However, in the current construction project of the wireless WiFi system, only attention is paid to whether the wireless service is stable and available. The service center that provides authentication services, content services, etc. is completely open to wireless access terminals, and the corresponding services can be accessed at will. Hidden danger of attack

Images