Request message authentication and data transmission method

Abstract

The invention discloses a request message authentication method, relating to the technical field of network security. The request message authentication method comprises the following steps of: receiving a request message transmitted by a client and acquiring a timestamp in the request message; calculating a difference value between a current timestamp and the timestamp and judging whether the difference value is in a preset time window or not; acquiring an authentication key matched with the request message, generating second signature data and judging whether first signature data is the sameas the second signature data or not according to the authentication key; acquiring first authentication data from the request message, judging whether the first authentication data is the same as second authentication data or not; acquiring a data encryption protection protocol and an encryption key matched with the request message, and generating a request message corresponding to the first authentication data according to the data encryption protection protocol and the encryption key; and judging whether the request message is the same as the request message transmitted by the client or not. Therefore, each server does not need to respectively agree with an access object, and the security in the data transmission process is improved.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to a request message authentication and data transmission method. Background technique [0002] In recent years, network security issues have become increasingly prominent, and hacker intrusions and network attacks are increasing. Conventional security defense concepts are often limited to the defense of access units such as gateways, SSL / TLS access points, and VPN access points. Important security facilities Roughly concentrated in the computer room or network entrance, under the strict monitoring of these devices, the security threats from outside the network are greatly reduced. However, the security threats from inside the network cannot be protected in this way, and now it has become the focus of attention of many security managers. [0003] The existing common authentication method usually encrypts the user's authentication key and transmits it to the server for veri...

AI Technical Summary

Problems solved by technology

[0005] (1) The encrypted data is converted into plain text between the access point and the server, and the data transmission process is easy to lose confidentiality on the intranet;

[0006] (2) The TLS protocol transmission continues to be deployed between the access point and the server, and the data transmission process needs to be encrypted, which affects efficiency;

[0007] (3) Once the access point is attacked, the access data in the client and server will be lost