Data communication method based on trusted service agent

Abstract

The invention discloses a data communication method based on a trusted service agent, and the method comprises the following steps: S1, deploying a communication control component M1 at a server side, and carrying out service registration on a trusted agent component M2 through the communication control component M1 to obtain registration content; S2, deploying a communication request component M3 at a client, and automatically initiating an access application to the trusted agent component M2 through the communication request component M3; S3, after the trusted agent component M2 receives the access application, performing identity authentication on the communication request component M3 through the trusted agent component M2 to obtain authentication information; S4, monitoring the access of the communication request component M3 according to the authentication information, and accessing the service provided by the server through the communication request component M3 based on the registration content to complete data communication. According to the invention, the problem that the sensitive service is exposed in the network for a long time, is easily detected by a network attacker and then attacks is solved, and the security of a service system is improved.

Description

technical field [0001] The invention relates to the field of network communication security, in particular to a data communication method based on a trusted service agent. Background technique [0002] In the modern network environment, service providers generally provide external services by means of fixed public network addresses and well-known protocol port numbers. For example, WEB service generally works on TCP port 80 or 443, and FTP service generally works on TCP port 21 and 22. The network address and protocol port of the service provider have been directly exposed in the public environment for a long time, and are easily detected by network attackers to initiate network attacks. Some service providers support providing external services in the form of dynamic network addresses, but most of them realize it through the dynamic resolution of DNS domain names. An attacker can easily obtain the real network address of the service provider, and then launch a network att...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the above-mentioned deficiencies in the prior art, a data communication method based on a trusted service agent provided by the present invention solves the problem that sensitive services are exposed in the network for a long time, are easily detected by network attackers, and then attack, and improve business system security

Images