A Dynamic Allocation Request Verification Method

Abstract

A method for dynamically assigning request verification, which calculates a weight value of an interface according to a weight parameter, selects a verification method corresponding to the weight value, and dynamically assigns a request verification method to a client according to the variability of the weight parameter. It can flexibly use a variety of request verification methods to further increase the security of data interaction with the server on the basis of HTTPS. Under multiple request verification, even if the packet is captured, it cannot attack all interfaces by forging or cracking one of them. The present invention enables the interface to obtain reasonable safety guarantee through the dynamic distribution mechanism, and saves server resources.

Description

technical field [0001] The invention belongs to the field of computer information security, relates to data encryption, storage, privacy protection and other contents and methods, and can be used for security and privacy protection during Internet data transmission. Background technique [0002] Nowadays, in the era of big data, more and more websites and APP applications are actively interacting with the server, which leads to the problem of secure data interaction with the server. Under the HTTP protocol, the request packet can easily be Packet capture, after the emergence of the HTTPS protocol, the proliferation of packet capture attacks has been curbed to a certain extent. Under the HTTPS protocol, most of the current request verification methods are fixed, and a single request verification method is used, which is safe and secure. Performance is not high. SUMMARY OF THE INVENTION [0003] In order to solve the shortcomings of the prior art, a dynamic allocation reque...

AI Technical Summary

Problems solved by technology

[0002] Now in the era of big data, more and more websites and APP applications are actively interacting with the server for data, and then the problem of secure data interaction with the server is derived. Under the HTTP protocol, the request packet is easily stolen. Packet capture, after the emergence of the HTTPS protocol, the flood of packet capture attacks has been curbed to a certain extent. Under the HTTPS protocol, most of the current request verification methods are fixed, and a single request verification method is adopted, which is safe. poor performance

Images