CN106713360B - Method for realizing web encryption access and information encryption storage based on gateway equipment - Google Patents

Method for realizing web encryption access and information encryption storage based on gateway equipment Download PDF

Info

Publication number
CN106713360B
CN106713360B CN201710079952.0A CN201710079952A CN106713360B CN 106713360 B CN106713360 B CN 106713360B CN 201710079952 A CN201710079952 A CN 201710079952A CN 106713360 B CN106713360 B CN 106713360B
Authority
CN
China
Prior art keywords
information
user
security
data
socket service
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN201710079952.0A
Other languages
Chinese (zh)
Other versions
CN106713360A (en
Inventor
张玲增
朱翔
闵长春
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Shanghai Gongjin Communication Technology Co Ltd
Original Assignee
Shanghai Gongjin Communication Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shanghai Gongjin Communication Technology Co Ltd filed Critical Shanghai Gongjin Communication Technology Co Ltd
Priority to CN201710079952.0A priority Critical patent/CN106713360B/en
Publication of CN106713360A publication Critical patent/CN106713360A/en
Application granted granted Critical
Publication of CN106713360B publication Critical patent/CN106713360B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/16Implementing security features at a particular protocol layer
    • H04L63/166Implementing security features at a particular protocol layer at the transport layer
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/02Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Computer And Data Communications (AREA)

Abstract

The invention relates to a method for realizing web encryption access and information encryption storage based on gateway equipment, which uses openssl secure socket layer protocol to process data transmission between a user and equipment; the data processing and data transmission services are separated, a local socket service is created and specially used for processing network data and generating response data, a remote socket service is created and specially used for interacting with encrypted data of a network client, and plaintext interaction is performed between the remote socket and the local socket; sensitive information such as user keys, authorities and the like required to be stored in the equipment is encrypted by adopting an encryption mode of AES + base64 coding, and ciphertext information is stored in an equipment storage system. By adopting the method, the web access of the gateway equipment can be automatically redirected to the access of the secure socket, the security and the high efficiency of data transmission and the original data processing logic and the information security of the user are ensured, and the method has wide application range.

Description

Method for realizing web encryption access and information encryption storage based on gateway equipment
Technical Field
The invention relates to the technical field of network communication, in particular to the technical field of network communication safety, and specifically relates to a method for realizing web encryption access and information encryption storage based on gateway equipment.
Background
Networks are indispensable tools for modern life, and gateway devices play a crucial role therein. With the development of the internet, the functions of the network have covered the aspects of people's life, and the security of the network is more and more concerned, and with the trend of intelligent development of the gateway device, the functions of the gateway device are more and more powerful, but when the device is subjected to illegal intrusion, the information leakage also causes greater loss to the user, so that the security responsibility borne by the gateway device is more and more large, and the security performance of the gateway product is an important subject that must be considered in the internet industry.
At the present stage, many gateway products do not provide a reliable security access policy for devices, so that the possibility that the devices are illegally accessed or user information is leaked is high, which causes a great potential security hazard to the gateway products, and on the other hand, more advanced functions which are convenient for users to use are not dared to be applied to the gateway devices due to the loss of the security policy, thereby losing the product selling points.
Openssl is a secure socket layer cryptographic library, which includes a main cryptographic algorithm, a common key and certificate encapsulation management function and an SSL protocol, and is a web security access policy that is widely used at present. The RSA algorithm is the most influential public key encryption algorithm at present, which is able to resist most cryptographic attacks known so far, and when the length of the key is sufficiently long, the information encrypted with RSA cannot be practically cracked. The AES algorithm is a symmetric encryption algorithm widely applied at present, and is characterized by high speed, compact coding and resistance to differential and linear attacks of known plaintext. The data transmission strategy of Openssl combined with the RSA algorithm can ensure the security of transmitted data to the maximum extent, and the AES algorithm has excellent security performance and efficiency in large file encryption transmission.
Disclosure of Invention
The invention aims to overcome the defects of the prior art and provides a method for realizing web encryption access and information encryption storage based on a gateway device.
In order to achieve the above object, the present invention has the following configurations:
the method for realizing the web encryption access based on the gateway equipment comprises the following steps:
(1) applying for a trusted SSL security certificate, and placing the SSL security certificate in gateway equipment;
(2) transplanting an openssl software library into the gateway device, and loading the openssl software library when a web service module of the gateway device is started;
(3) creating a remote socket service, a security socket service and a local socket service;
(6) when the security socket service receives a network client request, a new SSL security link is created, a socket connected to a user is bound, a client connection associated with a local socket is created, and request data of the network client are waited;
(7) after receiving the request data of the network client, the security socket service reads and decrypts the request data, transmits the plaintext data to the local socket service, and waits for response data;
(8) and after receiving the response data of the local socket service, the security socket service reads and encrypts the data, and transmits the ciphertext data to the network client to complete data interaction.
Preferably, the loading the openssl software library when the web service module of the gateway device is started is specifically:
and loading an encryption algorithm, an ssl security certificate and a user key when the web service module of the gateway device is started, and verifying the user key to complete an initialization process.
Preferably, the step (3) specifically includes the following steps:
(3-1) creating a remote socket service, binding the socket service with a value of 80 port, and redirecting to a 443 port bound by the SSL security link when a network client initiates a common connection request;
(3-2) creating a security socket service, binding the security socket service to a 443 port, and waiting for the network client to initiate an SSL connection request;
and (3-3) creating a local socket service, and waiting for the decrypted network request data sent by the security socket.
The method for realizing information encryption storage based on the gateway equipment based on the method also comprises the following steps:
(1) the gateway equipment is started to generate user initial information;
(2) generating an AES key of the gateway equipment, encrypting the initial user information by an AES algorithm, encoding the initial user information by base64, and storing the encoded information into the mib system;
(3) when a user logs in, whether the user can log in is judged by comparing the user information in the mib system with the user information of the network client received by the local socket service, if the user information is matched with the user information, the login is successful, otherwise, the login is failed.
Preferably, the comparing the user information in the mib system with the user information of the network client received by the local socket service specifically includes:
and reading user information from the mib system, encoding the user information through base64, decrypting the user information through an AES key, and checking the decrypted information with the user information of the network client received by the local socket service.
Preferably, the method further comprises an encryption step of the user change information:
(4) when the user changes the information, the identity of the user is confirmed through the step (3), if login is successful, the authority of the user is continuously confirmed, after the user is confirmed to have the authority of changing the information, the changed information of the user is encrypted by an AES algorithm, then base64 transcoding processing is carried out, and the ciphertext information is stored in the mib system.
The method for realizing web encryption access and information encryption storage based on the gateway equipment has the following advantages that:
1. web access to the gateway device is automatically redirected to access of the secure socket.
2. An openssl secure socket layer protocol is used for processing data transmission between a user and equipment, and an encryption algorithm adopts RSA + AES + SHA combination to ensure the security and high efficiency of data transmission.
3. The data processing and data transmission services are separated, a local socket service is created and specially used for processing network data and generating response data, a remote socket service is created and specially used for interacting with encrypted data of a network client, plaintext interaction is performed between the remote socket and the local socket, and the original data processing logic is guaranteed.
4. Sensitive information such as user keys, authorities and the like required to be stored in the equipment is encrypted by adopting an encryption mode of AES + base64 coding, and ciphertext information is stored in an equipment storage system, so that the information security of the user is ensured.
Drawings
Fig. 1 is a schematic diagram of a method for implementing web encrypted access based on a gateway device according to the present invention.
Fig. 2 is a schematic diagram of a method for implementing information encryption storage based on a gateway device according to the present invention.
Detailed Description
In order to more clearly describe the technical contents of the present invention, the following further description is given in conjunction with specific embodiments.
The method for realizing the web encryption access based on the gateway equipment comprises the following steps:
(1) applying for a trusted SSL security certificate, and placing the SSL security certificate in gateway equipment;
(2) transplanting an openssl software library into the gateway device, and loading the openssl software library when a web service module of the gateway device is started;
(3) creating a remote socket service, a security socket service and a local socket service;
(6) when the security socket service receives a network client request, a new SSL security link is created, a socket connected to a user is bound, a client connection associated with a local socket is created, and request data of the network client are waited;
(7) after receiving the request data of the network client, the security socket service reads and decrypts the request data, transmits the plaintext data to the local socket service, and waits for response data;
(8) and after receiving the response data of the local socket service, the security socket service reads and encrypts the data, and transmits the ciphertext data to the network client to complete data interaction.
In a preferred embodiment, the loading the openssl software library when the web service module of the gateway device is started is specifically:
and loading an encryption algorithm, an ssl security certificate and a user key when the web service module of the gateway device is started, and verifying the user key to complete an initialization process.
In a preferred embodiment, the step (3) specifically includes the following steps:
(3-1) creating a remote socket service, binding the socket service with a value of 80 port, and redirecting to a 443 port bound by the SSL security link when a network client initiates a common connection request;
(3-2) creating a security socket service, binding the security socket service to a 443 port, and waiting for the network client to initiate an SSL connection request;
and (3-3) creating a local socket service, and waiting for the decrypted network request data sent by the security socket.
The method for realizing information encryption storage based on the gateway equipment based on the method also comprises the following steps:
(1) the gateway equipment is started to generate user initial information;
(2) generating an AES key of the gateway equipment, encrypting the initial user information by an AES algorithm, encoding the initial user information by base64, and storing the encoded information into the mib system;
(3) when a user logs in, whether the user can log in is judged by comparing the user information in the mib system with the user information of the network client received by the local socket service, if the user information is matched with the user information, the login is successful, otherwise, the login is failed.
In a preferred embodiment, the comparing the user information in the mib system with the user information of the network client received by the local socket service specifically includes:
and reading user information from the mib system, encoding the user information through base64, decrypting the user information through an AES key, and checking the decrypted information with the user information of the network client received by the local socket service.
In a preferred embodiment, the method further comprises an encryption step of the user change information:
(4) when the user changes the information, the identity of the user is confirmed through the step (3), if login is successful, the authority of the user is continuously confirmed, after the user is confirmed to have the authority of changing the information, the changed information of the user is encrypted by an AES algorithm, then base64 transcoding processing is carried out, and the ciphertext information is stored in the mib system.
The technical scheme of the invention is a web security access strategy based on gateway equipment, which comprises two parts of web security encryption access and information encryption storage.
The web security encryption access is realized by that equipment is specially responsible for data interaction service with a network client by establishing openssl security socket service, the security socket service end and the network client establish security connection through openssl, the combination of RSA + AES + SHA algorithm is adopted for carrying out key exchange, data encryption and signature authentication, and the gateway equipment additionally establishes local socket service for carrying out service processing on network request data, returns response data and bears the function of a real web server. The security socket server serves as a transfer station of the network client and the web server, encrypted data transmitted from the client are decrypted and transmitted to the local socket server, meanwhile, returned data of the local socket are received and encrypted by a symmetric encryption algorithm and transmitted to the network client, and the security socket serves as the network client server and serves as the client of the local socket service, so that the functions of decrypting, encrypting and transferring data are achieved.
The information encryption storage is characterized in that local user sensitive information of the gateway equipment is changed into encrypted ciphertext to be stored in the mib system, the encryption algorithm adopts an AES algorithm, the generated ciphertext is encoded by base64, the ciphertext information is converted into text information which can be recognized by the mib system, the AES key is generated by mixing unique hardware information of the gateway equipment and specific software information, the key of each gateway equipment is different, and the cost for cracking the gateway equipment is higher.
In a specific embodiment, the web secure encrypted access, as shown in fig. 1, is implemented by the following steps:
1. and applying a trusted SSL security certificate and placing the security certificate in the gateway equipment.
2. And transplanting the gateway equipment into an openssl software library, loading the openssl when the equipment web service module is started, loading an encryption algorithm, loading an ssl security certificate, loading and verifying a user key, and completing an initialization process.
3. Creating a remote socket service, binding 80 ports, and redirecting to 443 ports when the network client side initiates a common connection request.
4. A secure socket service for remote access is created, binding 443 ports, waiting for the network client to initiate a ssl connection request.
5. And creating a local socket service, and waiting for the decrypted network request data sent by the security socket.
6. When the security socket service receives a network client request, a new SSL is created, a socket connected with a user is bound, a client connection to a local socket is created at the same time, and then request data of the network client are waited.
7. And when receiving the data requested by the network client, the security socket service reads and decrypts the data, then transmits the plaintext data to the local socket, and waits for response data.
8. And after receiving the response data of the local socket, the security socket service reads and encrypts the data, and transmits the ciphertext data to the network client to complete data interaction.
In a specific embodiment, the information is stored in an encrypted manner, as shown in fig. 1, and the specific implementation steps are as follows:
1. the gateway equipment starts to generate user initial information.
2. And generating an AES key of the gateway equipment, encrypting the initial user information by an AES algorithm, encoding by base64, and storing the encoded information into the mib system.
3. When a user logs in, the user information is read from the mib system, decoded by base64, decrypted by an AES key, checked with the user information of the network client received by the local socket service, matched and then successfully logged in, or else, the login is failed.
4. When the user changes the information, firstly, the identity of the user is confirmed as in step 3, then the authority of the user is confirmed, after the user can change the information, the changed information of the user is encrypted by an AES algorithm and then is transcoded by base64, and finally, the ciphertext information is stored in the mib system.
The method for realizing web encryption access and information encryption storage based on the gateway equipment has the following advantages that:
1. web access to the gateway device is automatically redirected to access of the secure socket.
2. An openssl secure socket layer protocol is used for processing data transmission between a user and equipment, and an encryption algorithm adopts RSA + AES + SHA combination to ensure the security and high efficiency of data transmission.
3. The data processing and data transmission services are separated, a local socket service is created and specially used for processing network data and generating response data, a remote socket service is created and specially used for interacting with encrypted data of a network client, plaintext interaction is performed between the remote socket and the local socket, and the original data processing logic is guaranteed.
4. Sensitive information such as user keys, authorities and the like required to be stored in the equipment is encrypted by adopting an encryption mode of AES + base64 coding, and ciphertext information is stored in an equipment storage system, so that the information security of the user is ensured.
In this specification, the invention has been described with reference to specific embodiments thereof. It will, however, be evident that various modifications and changes may be made thereto without departing from the broader spirit and scope of the invention. The specification and drawings are, accordingly, to be regarded in an illustrative rather than a restrictive sense.

Claims (6)

1. A method for realizing web encryption access based on gateway equipment is characterized by comprising the following steps:
(1) applying for a trusted SSL security certificate, and placing the SSL security certificate in gateway equipment;
(2) transplanting an openssl software library into the gateway device, and loading the openssl software library when a web service module of the gateway device is started;
(3) creating a remote socket service, a security socket service and a local socket service;
(4) when the security socket service receives a network client request, a new SSL security link is created, the SSL security link is bound to a socket of a user, meanwhile, a client connection associated to a local socket is created, and request data of the network client are waited;
(5) after receiving the request data of the network client, the security socket service reads and decrypts the request data, transmits the plaintext data to the local socket service, and waits for response data;
(6) and after receiving the response data of the local socket service, the security socket service reads and encrypts the data, and transmits the ciphertext data to the network client to complete data interaction.
2. The method for realizing web encrypted access based on gateway device according to claim 1, wherein the loading of the openssl software library when the web service module of the gateway device is started is specifically:
and loading an encryption algorithm, an ssl security certificate and a user key when the web service module of the gateway device is started, and verifying the user key to complete an initialization process.
3. The method for realizing web encrypted access based on the gateway device according to claim 1, wherein the step (3) specifically comprises the following steps:
(3-1) creating a remote socket service, binding the socket service to an 80 port, and redirecting to a 443 port bound by the SSL security link when a network client initiates a common connection request;
(3-2) creating a security socket service, binding the security socket service to a 443 port, and waiting for the network client to initiate an SSL connection request;
and (3-3) creating a local socket service, and waiting for the decrypted network request data sent by the security socket.
4. The method for realizing information encryption storage based on the gateway device is based on the method of claim 1, and is characterized in that the method for realizing information encryption storage based on the gateway device comprises the following steps:
(1) the gateway equipment is started to generate user initial information;
(2) generating an AES key of the gateway equipment, encrypting the initial user information by an AES algorithm, encoding the initial user information by base64, and storing the encoded information into the mib system;
(3) when a user logs in, whether the user can log in is judged by comparing the user information in the mib system with the user information of the network client received by the local socket service, if the user information is matched with the user information, the login is successful, otherwise, the login is failed.
5. The method for realizing information encryption storage based on gateway equipment according to claim 4, wherein the comparing of the user information in the mib system with the user information of the network client received by the local socket service specifically comprises:
and reading the user information from the mib system, decoding the user information through base64, decrypting the user information through an AES key, and checking the decrypted information with the user information of the network client received by the local socket service.
6. The method for realizing information encryption storage based on gateway device according to claim 4, wherein said method further comprises the step of encrypting the user-changed information:
(4) when the user changes the information, firstly, the identity of the user is confirmed through the step (3) of the method for realizing information encryption storage based on the gateway equipment, if login is successful, the authority of the user is continuously confirmed, after the user is confirmed to have the authority of changing the information, the changed information of the user is encrypted by an AES algorithm, then base64 transcoding processing is carried out, and the ciphertext information is stored in the mib system.
CN201710079952.0A 2017-02-15 2017-02-15 Method for realizing web encryption access and information encryption storage based on gateway equipment Active CN106713360B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710079952.0A CN106713360B (en) 2017-02-15 2017-02-15 Method for realizing web encryption access and information encryption storage based on gateway equipment

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710079952.0A CN106713360B (en) 2017-02-15 2017-02-15 Method for realizing web encryption access and information encryption storage based on gateway equipment

Publications (2)

Publication Number Publication Date
CN106713360A CN106713360A (en) 2017-05-24
CN106713360B true CN106713360B (en) 2020-05-08

Family

ID=58911441

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710079952.0A Active CN106713360B (en) 2017-02-15 2017-02-15 Method for realizing web encryption access and information encryption storage based on gateway equipment

Country Status (1)

Country Link
CN (1) CN106713360B (en)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107172078B (en) * 2017-06-27 2020-09-04 武汉蓝星软件技术有限公司 Security management and control method and system of core framework platform based on application service
CN108616502B (en) * 2018-03-12 2020-11-06 广东睿江云计算股份有限公司 Web safe storage method
CN110688233B (en) * 2018-07-05 2022-05-10 武汉斗鱼网络科技有限公司 Client ipc communication method, storage medium, equipment and system based on rxjs
CN111708658A (en) * 2020-06-09 2020-09-25 孟磊 Judicial-assisted case data risk management system and application method thereof
CN112637360B (en) * 2020-12-29 2023-03-24 国泰君安证券股份有限公司 System, method, device, processor and storage medium for realizing secure communication between mobile terminal and web
CN112995230B (en) * 2021-05-18 2021-08-24 杭州海康威视数字技术股份有限公司 Encrypted data processing method, device and system
CN115474291B (en) * 2022-11-14 2023-02-28 湖南柒丰智能科技有限公司 LoRa communication method and system

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101072108A (en) * 2007-07-17 2007-11-14 杭州华三通信技术有限公司 SSL VPN client end safety inspection method, system and device
CN101242324A (en) * 2007-02-09 2008-08-13 联想网御科技(北京)有限公司 A remote secure access method and system based on SSL protocol
US7565526B1 (en) * 2005-02-03 2009-07-21 Sun Microsystems, Inc. Three component secure tunnel
CN201937623U (en) * 2010-10-15 2011-08-17 富琼 Safety embedded-type server
CN102196002A (en) * 2010-03-17 2011-09-21 同济大学 Data-stream-communication-based network control system
CN104519129A (en) * 2014-12-16 2015-04-15 京信通信系统(中国)有限公司 Data transmission method, device and system
CN104869074A (en) * 2015-04-02 2015-08-26 武汉虹旭信息技术有限责任公司 Intelligent processing system and method for burst data exchange of server
CN105357183A (en) * 2015-09-30 2016-02-24 广州酷狗计算机科技有限公司 Communication method and device between client and local webpage
CN106161130A (en) * 2015-04-14 2016-11-23 阿里巴巴集团控股有限公司 The performance monitoring device of sing on web Socket agreement, system and method

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7565526B1 (en) * 2005-02-03 2009-07-21 Sun Microsystems, Inc. Three component secure tunnel
CN101242324A (en) * 2007-02-09 2008-08-13 联想网御科技(北京)有限公司 A remote secure access method and system based on SSL protocol
CN101072108A (en) * 2007-07-17 2007-11-14 杭州华三通信技术有限公司 SSL VPN client end safety inspection method, system and device
CN102196002A (en) * 2010-03-17 2011-09-21 同济大学 Data-stream-communication-based network control system
CN201937623U (en) * 2010-10-15 2011-08-17 富琼 Safety embedded-type server
CN104519129A (en) * 2014-12-16 2015-04-15 京信通信系统(中国)有限公司 Data transmission method, device and system
CN104869074A (en) * 2015-04-02 2015-08-26 武汉虹旭信息技术有限责任公司 Intelligent processing system and method for burst data exchange of server
CN106161130A (en) * 2015-04-14 2016-11-23 阿里巴巴集团控股有限公司 The performance monitoring device of sing on web Socket agreement, system and method
CN105357183A (en) * 2015-09-30 2016-02-24 广州酷狗计算机科技有限公司 Communication method and device between client and local webpage

Non-Patent Citations (4)

* Cited by examiner, † Cited by third party
Title
Building a Secure Web Server Based on OpenSSL and Apache;Li Gui-hong et cl;《IEEE:ICEE》;20100509;全文 *
SSL VPN的设计与实现;郭铃等;《计算机技术与发展》;20070831;第17卷(第8期);全文 *
基于OpenSSL的Web安全访问控制设计与实现;李国俊;《微电子学与计算机》;20061230;第23卷;全文 *
基于Web浏览器的SSL VPN网关系统的设计和实现;张仁等;《计算机工程与设计》;20070228;第28卷(第4期);全文 *

Also Published As

Publication number Publication date
CN106713360A (en) 2017-05-24

Similar Documents

Publication Publication Date Title
CN106713360B (en) Method for realizing web encryption access and information encryption storage based on gateway equipment
US7769997B2 (en) System, method and computer program product for guaranteeing electronic transactions
US8037295B2 (en) Hardware-bonded credential manager method and system
EP3073668B1 (en) Apparatus and method for authenticating network devices
US6874089B2 (en) System, method and computer program product for guaranteeing electronic transactions
CN101964791B (en) Communication authenticating system and method of client and WEB application
CN104917741B (en) A kind of plain text document public network secure transmission system based on USBKEY
US20130227286A1 (en) Dynamic Identity Verification and Authentication, Dynamic Distributed Key Infrastructures, Dynamic Distributed Key Systems and Method for Identity Management, Authentication Servers, Data Security and Preventing Man-in-the-Middle Attacks, Side Channel Attacks, Botnet Attacks, and Credit Card and Financial Transaction Fraud, Mitigating Biometric False Positives and False Negatives, and Controlling Life of Accessible Data in the Cloud
CN107105060A (en) A kind of method for realizing electric automobile information security
CN108809633B (en) Identity authentication method, device and system
CN104901935A (en) Bilateral authentication and data interaction security protection method based on CPK (Combined Public Key Cryptosystem)
CN103780609A (en) Cloud data processing method and device and cloud data security gateway
CN105119894A (en) Communication system and communication method based on hardware safety module
CN107094156A (en) A kind of safety communicating method and system based on P2P patterns
CN104901803A (en) Data interaction safety protection method based on CPK identity authentication technology
CN102404337A (en) Data encryption method and device
CN110198320B (en) Encrypted information transmission method and system
US20060053288A1 (en) Interface method and device for the on-line exchange of content data in a secure manner
CN113591109B (en) Method and system for communication between trusted execution environment and cloud
CN101141278B (en) Data transmission system, data transmission method, data processing method and corresponding device
CN1558584A (en) Safety proxy method
JPH10242957A (en) User authentication method, system therefor and storage medium for user authentication
CN113904767A (en) System for establishing communication based on SSL
CN116743372A (en) Quantum security protocol implementation method and system based on SSL protocol
CN103312671A (en) Method and system for verifying server

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant