API-based anti-refreshing method and device

Abstract

The invention provides an API-based anti-refreshing method and device, and the method comprises the steps of verifying an API calling request of a user according to a matching result of an access sequence of the API called by the user and a preset access sequence of the API; and if the verification fails, refusing the API calling request of the user. The device is used for executing the method. According to the API-based anti-refreshing method and device, illegal calling of malicious users is effectively prevented through context access control over the users, and the security of background services is greatly improved.

Description

technical field [0001] The invention relates to the field of communication technology, in particular to an API interface-based anti-swiping method and device. Background technique [0002] Nowadays, the Internet has become an indispensable tool in people's life, and all walks of life are going electronic. The essence of network services is the functions provided by various background API interfaces, so there are more and more malicious users and criminals. Molecules attack and crack API interfaces for illegal profit or other purposes, so the security requirements for API interface services are getting higher and higher. [0003] Aiming at the above problems in the prior art, common solutions are as follows: [0004] 1) Illegal requests are shielded by controlling the number of visits to the background interface and blacklist filtering. [0005] 2) Prevent packet capture copy request parameters or data tampering by means of timestamp + random number + parameter signature. ...

AI Technical Summary

Problems solved by technology

[0006] Solution 1) still cannot solve the problem that malicious users can forge multiple account information and directly poll attack services

[0007] Solution 2) There is a lack of restrictions on short-term and large-scale interface access, which may cause system paralysis due to concurrent requests exceeding the system's maximum processing capacity in a short period of time, and there is no restriction on access by malicious users

Images