KR20090000555A - Method and system for recording client's request in form of plain text required when testing performance of secure systems - Google Patents

Abstract

A system and a method for recording a client request needed for testing an encryption communication system in a plain text type are provided to test performance efficiently, and reduce time and manpower by storing the client request in the plain text type. A system included a protocol gateway(10), a protocol listener(20), and a repository(30). The protocol gateway includes a protocol handler(11) and a response data correction manager(12). The protocol handler includes a tool for transferring a request of a client(40) and a response of a server(50) between the client and the server. The response data correction manager includes the tool for correcting response data in real-time by using a response data correct setting unit(13). The protocol listener includes a protocol handler(21) and a log manager(22). The protocol handler includes the tool for reading data requested from the client. The log manager includes the tool for storing client data to the repository.

Description

A system and method for recording, in plain text, a client's request for performance testing on a system with encrypted communications. {Method and system for recording client ’s request in form of plain text required when testing performance of secure systems.}

 Figure 1 is a protocol gateway, protocol listener, the repository according to the present invention, the request of the client required for various tests, such as load test, performance test, functional test, etc. for a system that performs encryption communication in plain text form A block diagram showing the general configuration of a system capable of recording.

<Description of Symbols for Main Parts of Drawings>

10. Protocol Gateway

11. Protocol handler 12. Response data modification manager 13. Response data modification setting

20. Protocol listener

21. Protocol handlers 22. Log Manager

30. Repository

40. Client

50. Server

2 is a diagram illustrating a method of modifying a file describing a server call and an encryption method in response data of a server in a protocol gateway according to the present invention.

<Description of Symbols for Main Parts of Drawings>

60. Source file describing how to call the function

61. Server Call Functions Called by Clients

(PlainText: Plain text data requested by the user from the client)

62. Encryption statement

(CipherText: Encrypted data for client to pass to server)

63. Sentences Passing Encrypted Data to the Server

70. Modified file describing how to call functions

71. Server call function called by client

72. Functions for Passing Encrypted Data to the Server

73. Function to pass plain text data to protocol listener

The present invention is to record the request of the client in plain text (plain text or clear text) when the client and the server of the system under test performs the encrypted communication during various tests such as load test, performance test, functional test, etc. System and method,

 More specifically, the client and the server of the system under test communicate using a password and a module. In particular, the API call method used by the client to encrypt data to be requested to the server is received from the server in the form of a file. In this case, the protocol gateway is configured between the client and the server, and the protocol gateway allows the server to modify the contents of the file and the like including the encryption calling method delivered to the client in real time, so that the protocol listener is driven in advance. ) To forward the client's request in plain text form so that the protocol listener stores the received plain text request from the client, thereby performing various tests such as load test, performance test, function test, etc. Need cli To a system and method capable of recording a request bit in the plaintext form.

 When automating a test using a virtual user in various tests such as a load test, a performance test, and a functional test, it is very important to create a scenario that is a combination of client requests to be reproduced by the virtual user. In recent years, computerized environments often use various encryption methods to securely communicate with clients and servers, including many fields such as Internet banking systems of banks, trading systems of securities firms, and systems that require internal security. do. When testing various types of systems for encrypted communication, most current methods use a method of recording a client's request as it is, and then performing a test after the tester finds the encryption part and directly changes it to plain text.

 For example, an environment consisting of a web client and a web server will be described in more detail. In the case where the web browser and the server are in encrypted communication, the recording method of most web browser requests is not encrypted and the request data of the encrypted client is not encrypted. After saving the data as it is, when creating a scenario for the virtual user to use in the test, they manually change the encrypted portion back to the original plain text data. When using this method to generate scenarios for various tests such as load test, performance test, and functional test, a lot of time and effort is required for plain text conversion of the recorded request data. Therefore, there is a need for a system and method capable of recording encrypted data of an encrypted client in plain text when the server and the client perform encrypted communication.

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and an object of the present invention is to provide a client which is necessary for various tests such as load test, performance test, and functional test for a system where a server and a client perform encrypted communication. To provide a system and method for recording data requested by the server in plain text form.

In order to achieve the above object, the present invention is characterized in that it comprises a protocol gateway (Protocol Gateway), a protocol listener and a repository (Repository). Specifically, the protocol gateway supports a protocol used between the client and the server, and includes a means by which the communication between the client and the server can be made transparent, and communicates the contents of the response data transmitted from the server to the client. And means for changing the protocol, the protocol listener including communication means for the protocol used in the communication between the client and the server, and means for receiving the data requested from the client and storing the data in the repository. Turry is characterized in that it comprises means for storing the request of the client.

 Preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a request of a client required for various tests such as a load test, a performance test and a functional test for a system in which a server and a client perform encrypted communication using a protocol gateway, a protocol listener, and a repository according to the present invention. Is a block diagram showing the general configuration of a system capable of recording in plain text.

 As shown in Fig. 1, the overall configuration of a system for recording the request data of a client in encrypted communication according to the present invention in a plain text form is a protocol gateway 10, a protocol listener 20, and a repository 30. The protocol gateway 10 includes a protocol handler 11 and a response data modification manager 12, and the protocol listener 20 includes a protocol handler 21 and a log manager 22.

 The protocol handler 11 includes a means for transferring the data requested by the client 40 to the server 50, and for transmitting the response data coming down from the server 50 to the client 40, the response data modification manager (12) includes means for changing the contents of the response data coming down from the server in real time with reference to the response data modification setting (13), wherein the protocol handler 21 in the protocol listener 20 is configured to execute the client 40. The log manager 22 includes means for storing the data sent by the client 40 received by the protocol handler 21 in the repository 30. The repository 30 includes means for storing data delivered by the log manager 22. Here, the repository 30 mainly uses a file system or a database system.

 Using FIG. 1, the method of recording the request data of a client in encrypted communication, for example, the client of FIG. 1 to a web browser, the server of FIG. 1 to a web server, and the usage protocol to HTTP, for example, in detail. To explain,

① The web browser 40 requests a JavaScript file describing the details of the encryption API from the protocol gateway 10. ② The protocol gateway 10 transmits the request of the web browser to the server 50. ③ The server sends the requested JavaScript file to the protocol gateway 10. ④ The protocol gateway 10 uses the response data modification manager 12 to modify the encryption call function part of the content of the JavaScript file so that the code for sending data to the protocol listener 20 in plain text is included. At this time, the response data modification manager modifies the modification details with reference to the response data modification setting 13. ⑤ The web browser 40 makes a request to the protocol listener 20 by using the plain text data as modified by the response data modification manager 12 with reference to the JavaScript file received from the protocol gateway 10. ⑥ The protocol listener 20 receives the request data using the protocol handler 21 and stores the plain text data in the repository 30 using the log manager 22. ⑦ Meanwhile, the client 40 sends a request to the protocol gateway using the encrypted data with reference to the modified JavaScript file. (8) The protocol gateway 10 delivers the requested encrypted data to the server. 9. The server 50, which receives the encrypted request, performs the corresponding application and transmits the result to the protocol gateway 10. The protocol gateway 10 transmits the response data to the client 40.

 Javascript received from the server, using FIG. 2, assuming that the client receives a web browser, the server receives a web server, the protocol used for HTTP, and a client receives and processes a JavaScript file that encrypts and invokes the server. In detail, how to modify the contents of the file, in general, the original JavaScript file (60) defines a function 61 that is called when a user clicks a button or the like in a browser using a mouse. The function 61 consists of a code 62 which encrypts plain text, which is the request data of the client, and sends 63 the encrypted data CipherText to the server. As shown in FIG. 2, the server call part 61, which is a dotted rectangle part of the JavaScript file 60, is changed to a dotted part of the modified JavaScript file 70. When the browser referring to the changed JavaScript file clicks a button or the like, when the user calls the CallServer function 71 of the changed JavaScript file 70, the CallServer function 71 calls the CallListener function using the passed plain text. Call 73 to pass the plain text data to the protocol listener and then continue the original communication by calling the CallServerOrg function 72. As a result, each time a client requests an encryption call, the plain text data is first passed to the protocol listener, and the encrypted data is passed to the server through a transparent protocol gateway, allowing the protocol listener to record the plain text data in the repository. do.

 The present invention is not limited to the web browser, the web server, and the HTTP protocol described in the above embodiments, and can be applied in various ways within the scope of the technical idea of the present invention. For example, the client may be a client such as X-Internet, a Microsoft ActiveX control, or a Java applet, and each client may use a JavaScript file or an XML file or a text file in another format to determine how to call encryption related APIs from the server. In the case of receiving an encryption call, a plain text of encryption request data for the server of each client may be recorded using the same method.

 In addition, if there is a file on the server that does not have a protocol gateway and describes how to make a client call to the server in the form of a JavaScript file or XML file, the server can directly The call part may be changed in advance as the response data modification manager of the protocol gateway changes, and only the protocol listener may be driven to record encrypted data requested by the client in plain text.

 As described above, according to the present invention, the client's request, which is required for various tests such as load test, performance test, function test, etc. of the system in which the server and the client communicate with the encrypted communication, can be recorded in plain text form. . The client's request can be used as it is without additional work by the tester when performing load test, performance test, functional test, and the like. In addition, the client's request can be stored in plain text and used for performance analysis. This provides a method and system for plain text recording that saves time and manpower.

Claims (3)

 As a method of recording client request data in plain text form, which is necessary for various tests such as load test, performance test, and functional test for a system where a server and a client communicate encrypted communication. Running the protocol listener on the promised IP address and port, When a client requests the server for a server call method including an encryption method in the form of a file, Changing the server calling portion by using the response data changing means of the protocol gateway; When changing the server call part, using the promised IP address and port number of the protocol listener. Modifying the protocol listener to request data in plain text form; Further, when changing the server call part, requesting not only the protocol listener call but also encrypted data to the protocol gateway so that the encrypted request is transmitted to the server so that the business logic can be processed normally. The protocol listener may store the plain text data requested from the client in a repository. Characterized in that it comprises How to record client request data in plain text  As a method of recording client request data in plain text form, which is necessary for various tests such as load test, performance test, and functional test for a system where a server and a client communicate encrypted communication. Running the protocol listener on the promised IP address and port, If a server call method including an encryption method to be used by the client exists on the server in the form of a file, the server calls the server in a file in which the administrator describes the server call method in advance when recording the client's request for testing. Changing the part, Modifying the server call part so that plain text data is requested from the protocol listener using the promised IP address and port number of the protocol listener; Further, when changing the server call part, requesting not only the protocol listener call but also encrypted data to the protocol gateway so that the encrypted request is transmitted to the server so that the business logic can be processed normally. The protocol listener may store the plain text data requested from the client in a repository. Characterized in that it comprises How to record client request data in plain text  A protocol gateway 10, a protocol listener 20, and a repository 30, The protocol gateway 10, A protocol handler 11 and a response data modification manager 12, The protocol handler 11 transparently transfers the request of the client 40 to the server 50 by supporting a protocol used between the client 40 and the server 50. Means for transparently conveying the response of the server 50 to the client 40, The response data modification manager 12 uses the response data modification setting 13 means to set the response data as set by the user. Includes means to edit in real time, The protocol listener 20, A protocol handler 21 and a log manager 22, The protocol handler 21 includes means for supporting a protocol used by the client 40 to read data requested by the client, The log manager 22 includes means for receiving the data of the client received by the protocol handler 21 and storing it in the repository 30, The repository 30, Means for receiving and storing data from the log manager 22 of the protocol listener 20 Characterized in that it comprises A system that can record the client's request data in plain text form required in various tests such as load test, performance test, function test, etc. of the system where the server and client perform encrypted communication

Images