Method for preventing web system data migration based on asymmetric encryption algorithm

Abstract

The invention discloses a web system data transplantation prevention method based on an asymmetric encryption algorithm. The method comprises the following steps: S1, a user logs in a system through a browser 1, reads a unique data calculator machine code and calculator feature information of a client through a client fingerprint generator to generate a client fingerprint, and stores and binds the client fingerprint with the user and the browser; S2, the client fingerprint is combined with the current time and the public key to encrypt and generate a string of character strings, and the character strings are client signatures; S3, a server interface is visited, and when a normal interface accesses a server, a client signature and a server private key are carried for encrypting to obtain a fingerprint and time; S4, the parameter is copied to access the server interface through the browser 2, and if the verification of the client fingerprint verifier is not passed, the service response fails. The method has the characteristics of preventing pretending, authenticating identity and preventing parameter tampering, and a timestamp comparison and fingerprint comparison technology exists, so that replay attacks can be prevented when the data of the previous timestamp is invalid.

Description

technical field [0001] The invention belongs to the field of network technology, and more specifically relates to a method for preventing web system data migration based on an asymmetric encryption algorithm. Background technique [0002] Web applications are composed of dynamic scripts, compiled codes, etc. It is usually set up on the web server, and the user sends a request on the web browser. These requests use the HTTP protocol to interact with the web application of the enterprise through the Internet, and the web application communicates with the database and other dynamic content in the background of the enterprise. Portable secondary use is a common phenomenon in web systems now; [0003] Due to the maturity of network technology, hackers have gradually shifted their attention from attacks on web servers to attacks on web applications; 75% of information security attacks occur on web applications rather than on the network level; the existing Web sites have the fol...

AI Technical Summary

Problems solved by technology

[0003] Due to the maturity of network technology, hackers have gradually shifted their attention from attacks on web servers to attacks on web applications; 75% of information security attacks occur on web applications rather than on the network level; the existing Web sites have the following disadvantages: web system interface data in plain text, interface functions are easy to guess, request parameters are easy to be tampered with, important parameters are not unique, can be copied, server interface recognition and repeated consumption, and client requests can be simulated, thereby Web sites are vulnerable to attacks; therefore, we propose a method based on asymmetric encryption algorithms to prevent data migration in web systems

Images