Safety authentication method and system based on HTTP protocol

Abstract

The invention relates to a safety authentication method and system based on an HTTP protocol. The method is characterized in that an encryption algorithm is randomly selected from a password algorithmlibrary with a highly-customized non-standard irreversible password algorithm library in a table authentication manner based on the Http protocol in order to perform irreversible decryption on a userpassword in conjunction with a unique random code generated once a client accesses a server. The encryption method is a non-standard and highly-customized method, so that a safe authentication mechanism is realized; various attacks occurring in basic authentication and digest authentication are avoided; and password cracking and playback authentication can be effectively prevented.

Description

technical field [0001] The invention relates to the field of security authentication methods, in particular to an HTTP protocol-based security authentication method and system. Background technique [0002] In some special occasions, it is necessary to use the Http protocol to achieve secure login verification. At present, the authentication methods based on the Http protocol include basic authentication and digest authentication. The password transmitted by the basic authentication method is very easy to be cracked. Even if the password is encrypted, it cannot prevent replay authentication. , and digest authentication has appeared many attack methods, especially the digest authentication attack on web application server vulnerabilities. Therefore, the current method of security authentication using the Http protocol cannot guarantee its security. Contents of the invention [0003] In order to solve the above technical problems, the present invention provides a security a...

AI Technical Summary

Problems solved by technology

[0002] In some special occasions, it is necessary to use the Http protocol to achieve secure login verification. At present, the authentication methods based on the Http protocol include basic authentication and digest authentication. The password transmitted by the basic authentication method is very easy to be cracked. Even if the password is encrypted, it cannot prevent replay authentication. , and there have been many attack methods for digest authentication, especially for digest authentication attacks against Web application server vulnerabilities.

Therefore, the current method of using the Http protocol for security authentication cannot guarantee its security.

Images