CN102739659A - Authentication method for preventing replay attack - Google Patents
Authentication method for preventing replay attackDownload PDFInfo
- Publication number
- CN102739659A CN102739659ACN2012102002623ACN201210200262ACN102739659ACN 102739659 ACN102739659 ACN 102739659ACN 2012102002623 ACN2012102002623 ACN 2012102002623ACN 201210200262 ACN201210200262 ACN 201210200262ACN 102739659 ACN102739659 ACN 102739659A
- Authority
- CN
- China
- Prior art keywords
- time
- authentication
- way data
- application server
- replay
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
- 238000000034methodMethods0.000titleclaimsabstractdescription25
- 238000012795verificationMethods0.000claimsabstractdescription12
- 230000004044responseEffects0.000claimsdescription15
- 230000006870functionEffects0.000description7
- 230000001360synchronised effectEffects0.000description4
- 235000014510cookyNutrition0.000description3
- 238000004891communicationMethods0.000description2
- 238000005516engineering processMethods0.000description2
- 238000012544monitoring processMethods0.000description2
- 230000008569processEffects0.000description2
- 230000009286beneficial effectEffects0.000description1
- 230000005540biological transmissionEffects0.000description1
- 230000015572biosynthetic processEffects0.000description1
- 230000006378damageEffects0.000description1
- 230000008260defense mechanismEffects0.000description1
- 238000005538encapsulationMethods0.000description1
- 230000002427irreversible effectEffects0.000description1
- 230000007246mechanismEffects0.000description1
- 230000035943smellEffects0.000description1
- 238000012546transferMethods0.000description1
Images
Landscapes
- Data Exchanges In Wide-Area Networks (AREA)
- Computer And Data Communications (AREA)
Abstract
Translated fromChinese
Description
Technical field
The present invention relates to the communication system field of authentication, especially a kind of authentication method of anti-replay-attack.
Background technology
Replay Attack (Replay Attacks) is weighed again and is broadcast attack, replay attack or freshness attack (Freshness Attacks); Be meant that the assailant sends the bag that a destination host had received; Reach the purpose of fraud system; Be mainly used in the authentication process, destroy the correctness of authentication.Replay Attack continuous malice of meeting or rogue ground repeat an active data transmission, and the assailant utilizes network monitoring or other modes to steal authentication authority, issues certificate server to it again more afterwards, with the destruction authenticating safety.For example intercepting and capturing cookie and submit cookie to through monitoring http transfer of data or other modes is exactly a kind of Replay Attack, thereby the cookie that can easily duplicate others obtains corresponding authentication authority.
Suffer Replay Attack for fear of server; The general defense mechanism of judging based on the time that adopts in the prior art; And it is whether expired in order to guarantee that different server directly can be discerned the message that receives; Timestamp is played the part of an important role therein, because can there be regular hour difference problem in a side of mark timestamp with a side who receives message, generally can adopt IEEE1588 Precision Time Protocol (Precision Time Protocol; PTP), perhaps loose time synchronizing method carries out time synchronized.If adopt special time synchronization protocol, may cause communication protocol or system complicated more, to increase the unsteadiness of system; If adopt loose time synchronizing method; Promptly through between two services, carrying out three-way handshake; Server calculates the time maximum difference between them then; Then need system or agreement can stand the delay or the asynchronous problem of certain hour, but in some system or agreement this delay or asynchronous be unallowed.
Summary of the invention
The technical problem that the present invention will solve is: a kind of authentication method of the synchronous anti-replay-attack that do not take time is provided, and this method has improved the fail safe of Verification System.
In order to solve the problems of the technologies described above, the technical scheme that the present invention adopted is:
A kind of authentication method of anti-replay-attack may further comprise the steps:
Client is sent login request message to the login authentication server;
The login authentication server generates the authentication authority that comprises the very first time stamp that identifies the current time and gives client;
Client is sent services request, is arrived application server from the authentication authority of login authentication server and the one-way data chain value that oneself generates;
Application server will comprise that the information of authentication authority and one-way data chain value sends to the login authentication server;
The login authentication server judges the correctness of said authentication authority and calculates the current time and time difference that the very first time stabs, and result of determination, the said time difference of the correctness of the authentication authority that will be used to prove whether the user has logined and the one-way data chain value that receives are packaged into check information and send to application server;
Application server receives check information, judges whether the one-way data chain value that receives is up-to-date one-way data chain value, then is judged to be message playback if not, directly abandons this verification message; If then the services request of client is carried out service response according to check information.
Further as preferred embodiment, said application server carries out service response according to check information to the services request of client and may further comprise the steps:
Compared the effective time of time difference in the check information and setting, and whether the judgement time difference is greater than the effective time of setting, if then abandon this check information; Then carry out next step if not;
Judge whether result of determination is correct,, then abandon this check information if not if authentication authority is correctly then carried out service response.
Further as preferred embodiment, the effective time of said setting is from the application server end.
Further as preferred embodiment, the effective time of said setting is from the login authentication server end.
Further as preferred embodiment, can artificially adjust the effective time of said setting.
The invention has the beneficial effects as follows: the authentication method of anti-replay-attack of the present invention; To the verification of the Service Ticket term of validity time; It or not time difference at application server end verification Service Ticket; But the login authentication server end is transferred in the verification of the Service Ticket term of validity, and because stabbing by the login authentication server, produces the very first time on the Service Ticket, when the term of validity of verification Service Ticket, adopt the time of login authentication server local side and the very first time to stab relatively; Guarantee the accuracy of verification, do not needed the time of application server and login authentication server to carry out synchronously; The legal services request that has further guaranteed the user through the one-way data chain not by Replay Attack maybe.
Description of drawings
Be described further below in conjunction with the accompanying drawing specific embodiments of the invention:
Fig. 1 is the flow chart of steps of the authentication method of anti-replay-attack of the present invention;
Fig. 2 is the flow chart of steps that application server carries out the service response preferred embodiment in the authentication method of anti-replay-attack of the present invention to the services request of client according to check information;
Fig. 3 is the sketch map of the authentication method application scenarios of anti-replay-attack of the present invention;
Fig. 4 is the application sketch map of one-way data chain of the present invention.
Embodiment
With reference to Fig. 1, a kind of authentication method of anti-replay-attack may further comprise the steps:
Client is sent login request message to the login authentication server;
The login authentication server generates and comprises the very first time stamp Time that identifies the current timeSignOnAuthentication authority give client;
Client is sent services request, is arrived application server from the authentication authority of login authentication server and the one-way data chain value that oneself generates;
Application server will comprise that the information of authentication authority and one-way data chain value sends to the login authentication server;
The login authentication server is judged the correctness of said authentication authority and is calculated current time TimeCurrentStab Time with the very first timeSignOnTime difference, result of determination, the said time difference of the correctness of the authentication authority that will be used to prove whether the user has logined and the one-way data chain value that receives are packaged into check information and send to application server;
Application server receives check information; Judge whether the one-way data chain value that receives is up-to-date one-way data chain value; Above-mentioned deterministic process is specially: the one-way data chain value that receives is carried out the hash function operation; Judge whether the result that hash function draws is consistent with the one-way data chain value of application server for storage,, and the data chainning value that receives is preserved the one-way data chain value of the original storage of replacement if consistently then the services request of client is carried out service response according to check information; Then be judged to be message playback if not, directly abandon this verification message.Application server first the customer in response end send services request the time; The one-way data chain value that receives is up-to-date one-way data chain value; So directly be stored on the application server, in the follow-up service response, application server needs that all the one-way data chain value in the check information is carried out the hash function operation and compares with the one-way data chain value of storing; Judge whether the one-way data chain value that receives is up-to-date one-way data chain value, to avoid the Replay Attack of client-side service request.
With reference to Fig. 4, one-way data chain (One-Way Chains) is also claimed hash chain, is a kind of cryptoguard scheme in insecure environments, but in the present invention, uses the playback that this mechanism prevents the service request information that client is sent.Fig. 4 has provided the formation structure and the application structure of one-way data chain, and the one-way data chain is by unidirectional execution one-way function (also claiming hash function) F generation repeatedly, and one-way function F algorithm is irreversible, can generate multistage one-way data chain value S like thisi, i.e. F (Si)=SI-1, and Fi(Si)=S0Because when using, to SiValue choose the reversed in order that order just generates with this data chainning, even therefore the third party has stolen a certain one-way data chain value of having used, also can't learn the one-way data chain value after the renewal, thereby can't carry out Replay Attack authentication message.The service request information that application server of the present invention utilizes the one-way data chain can guarantee that client is sent is reliably, and non-Replay Attack produces.
Further as preferred embodiment, with reference to Fig. 2, said application server carries out service response according to check information to the services request of client and may further comprise the steps:
Compared the effective time of time difference in the check information and setting, and whether the judgement time difference is greater than the effective time of setting, if then abandon this check information; Then carry out next step if not;
Judge whether result of determination is correct,, then abandon this check information if not if authentication authority is correctly then carried out service response.
Further as preferred embodiment, for example the effective time of this setting can from the internal memory of application server read from the application server end effective time of said setting.
Further as preferred embodiment; The effective time of said setting is from the login authentication server end; For example be included in the effective time of this setting in the check information of encapsulation; Application server can read from check information, has guaranteed to adjust at the login authentication server end value of predefined effective time like this.
Further as preferred embodiment, can artificially adjust the effective time of said setting, to adapt to different application scenarios.
Fig. 3 is the sketch map of the authentication method application scenarios of anti-replay-attack of the present invention;
S1: client is sent logging request to the login authentication server;
S2: the login authentication server sends login response and gives client, and login response is the authentication authority that generates at the login authentication server end, and this authentication authority comprises the very first time stamp Time that identifies the current timeSignOn, also comprise other information that are used for authentication, for example whether check code etc. logins success with identifying user;
S3: the user sends services request through client and gives application server, and this services request comprises that simultaneously including the very first time stabs TimeSignOnAuthentication authority and one-way data chain value etc.; The subscription client self maintained one-way data chain (One-Way Chains) with and up-to-date chain value, for example up-to-date chain value S12
S4: application server is with authentication authority and one-way data chain value S12Send to the login authentication server etc. relevant information etc.; Application server self is preserved the one-way data chain value S of checking last time11
S5: the login authentication server is judged the generation result of determination according to the authentication information of storage to the correctness of authentication authority, and this result of determination is used to prove whether the user logins, and calculates the current time Time of selfCurrentStab Time with the very first timeSignOnTime difference, with result of determination, time difference and one-way data chain value S12Be packaged into check information and send to application server;
S6: application server receives check information, judges the one-way data chain value S that receives12Whether be up-to-date one-way data chain value, promptly to one-way data chain value S12Carry out hash function operation, judged result whether with the one-way data chain value S of storage11Unanimity then directly abandons this verification message if not; If then continue to read result of determination and time difference in the check information, if services request authentication success in the effective time of setting, then application server carries out service response.One-way data chain value in the storage of application server end can be updated to S12Even the listener-in smells and visits one-way data chain value S like this12, owing to can't derive up-to-date one-way data chain value S13Thereby, avoided Replay Attack.
The authentication method of anti-replay-attack of the present invention; The local zone time that is stabbed the login authentication server that stabs with this very first time of generation the very first time on the authentication authority compares; Thereby saved the trouble of time synchronized; Not only avoided the complicacy of system or agreement but also evaded the delay that time synchronized causes, through use legal services request that the one-way data chain guarantees the user not by Replay Attack maybe.
More than be that preferable enforcement of the present invention is specified; But the invention is not limited to said embodiment; Those of ordinary skill in the art can also make all equivalent variations or replacement under the prerequisite of spirit of the present invention, distortion that these are equal to or replacement all are included in the application's claim institute restricted portion.
Claims (5)
1. the authentication method of an anti-replay-attack is characterized in that, may further comprise the steps:
Client is sent login request message to the login authentication server;
The login authentication server generates the authentication authority that comprises the very first time stamp that identifies the current time and gives client;
Client is sent services request, is arrived application server from the authentication authority of login authentication server and the one-way data chain value that oneself generates;
Application server will comprise that the information of authentication authority and one-way data chain value sends to the login authentication server;
The login authentication server judges the correctness of said authentication authority and calculates the current time and time difference that the very first time stabs, result of determination, said time difference and the one-way data chain value that receives is packaged into check information sends to application server;
Application server receives check information, judges whether the one-way data chain value that receives is up-to-date one-way data chain value, then is judged to be message playback if not, directly abandons this verification message; If then the services request of client is carried out service response according to check information.
2. the authentication method of a kind of anti-replay-attack according to claim 1, it is characterized in that: said application server carries out service response according to check information to the services request of client and may further comprise the steps:
Compared the effective time of time difference in the check information and setting, and whether the judgement time difference is greater than the effective time of setting, if then abandon this check information; Then carry out next step if not;
Judge whether result of determination is correct,, then abandon this check information if not if authentication authority is correctly then carried out service response.
3. the authentication method of a kind of anti-replay-attack according to claim 2, it is characterized in that: the effective time of said setting is from the application server end.
4. the authentication method of a kind of anti-replay-attack according to claim 2, it is characterized in that: the effective time of said setting is from the login authentication server end.
5. the authentication method of a kind of anti-replay-attack according to claim 3, it is characterized in that: can artificially adjust the effective time of said setting.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210200262.3ACN102739659B (en) | 2012-06-16 | 2012-06-16 | Authentication method for preventing replay attack |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201210200262.3ACN102739659B (en) | 2012-06-16 | 2012-06-16 | Authentication method for preventing replay attack |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN102739659Atrue CN102739659A (en) | 2012-10-17 |
| CN102739659B CN102739659B (en) | 2015-07-08 |
Family
ID=46994443
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201210200262.3AActiveCN102739659B (en) | 2012-06-16 | 2012-06-16 | Authentication method for preventing replay attack |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN102739659B (en) |
Cited By (35)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN103269256A (en)* | 2013-05-10 | 2013-08-28 | 卡斯柯信号有限公司 | Security Judgment Method of Message Timeliness in Security Coded Communication System |
| WO2014094237A1 (en)* | 2012-12-18 | 2014-06-26 | Intel Corporation | Techniques associated with server transaction latency information |
| WO2014110774A1 (en)* | 2013-01-18 | 2014-07-24 | Hewlett-Packard Development Company, L.P. | Preventing an input/output blocking attack to a wireless access point |
| CN104092697A (en)* | 2014-07-18 | 2014-10-08 | 杭州华三通信技术有限公司 | Anti-replaying method and device based on time |
| CN104871165A (en)* | 2012-11-20 | 2015-08-26 | Ati科技无限责任公司 | Firmware-implemented software licensing |
| CN105119884A (en)* | 2015-07-10 | 2015-12-02 | 深圳市美贝壳科技有限公司 | Method for verifying authority of network communication user |
| CN105516186A (en)* | 2015-12-31 | 2016-04-20 | 华为技术有限公司 | Method for preventing replay attack and server |
| CN105635139A (en)* | 2015-12-31 | 2016-06-01 | 深圳市安之天信息技术有限公司 | Anti-overflow-attack document security operation and analysis method and system |
| CN106462706A (en)* | 2013-12-31 | 2017-02-22 | 威斯科数据安全国际有限公司 | A method and apparatus for providing client-side score-based authentication |
| CN106506635A (en)* | 2016-10-28 | 2017-03-15 | 郑建钦 | A kind of portable method for cloud storage |
| CN106548080A (en)* | 2016-10-28 | 2017-03-29 | 鄢碧珠 | A kind of remote data storage method |
| CN106570415A (en)* | 2016-10-28 | 2017-04-19 | 郑建钦 | Remote end data storage system |
| CN106570378A (en)* | 2016-10-28 | 2017-04-19 | 鄢碧珠 | System for improving storage security of user |
| CN106909953A (en)* | 2017-03-02 | 2017-06-30 | 重庆砖家宝网络科技发展有限公司 | Time stamp label preparation method and system |
| CN107623667A (en)* | 2016-07-15 | 2018-01-23 | 腾讯科技（深圳）有限公司 | Data playback determination methods and device |
| CN107835145A (en)* | 2016-09-21 | 2018-03-23 | 炫彩互动网络科技有限公司 | The method and distributed system of a kind of anti-replay-attack |
| CN108540513A (en)* | 2017-03-03 | 2018-09-14 | 中国移动通信集团福建有限公司 | Ask the determination method and device of Replay Attack |
| CN108809991A (en)* | 2018-06-15 | 2018-11-13 | 北京云枢网络科技有限公司 | A method of the client side verification based on SDK dynamic watermarks |
| CN109155783A (en)* | 2016-05-26 | 2019-01-04 | 维萨国际服务协会 | Reliable Timestamp Credentials |
| CN109379193A (en)* | 2018-12-06 | 2019-02-22 | 佛山科学技术学院 | A kind of dynamic anti-replay attack authentication method and device |
| US10264013B2 (en) | 2013-01-18 | 2019-04-16 | Hewlett Packard Enterprise Development Lp | Preventing a memory attack to a wireless access point |
| CN110166471A (en)* | 2019-05-28 | 2019-08-23 | 杭州迪普科技股份有限公司 | A kind of portal authentication method and device |
| CN110890960A (en)* | 2019-11-16 | 2020-03-17 | 杭州安恒信息技术股份有限公司 | A Data Replay Attack Recognition and Protection Method Based on Multiple Verification Mechanism |
| CN111259296A (en)* | 2020-01-14 | 2020-06-09 | 武汉极意网络科技有限公司 | Method and system for ensuring ordering of Web resource requests |
| CN111654451A (en)* | 2020-05-13 | 2020-09-11 | 南京南瑞继保电气有限公司 | Message anti-replay method and electronic equipment |
| CN112367329A (en)* | 2020-11-17 | 2021-02-12 | 北京知道创宇信息技术股份有限公司 | Communication connection authentication method, communication connection authentication device, computer equipment and storage medium |
| CN112711759A (en)* | 2020-12-28 | 2021-04-27 | 山东鲁能软件技术有限公司 | Method and system for preventing replay attack vulnerability security protection |
| CN109756460B (en)* | 2017-11-06 | 2021-07-09 | 中移（杭州）信息技术有限公司 | A kind of anti-replay attack method and device |
| CN113612795A (en)* | 2021-08-18 | 2021-11-05 | 广州科语机器人有限公司 | Replay attack judgment method, Internet of things equipment, electronic equipment and storage medium |
| CN114124374A (en)* | 2021-11-10 | 2022-03-01 | 郭胜群 | Communication anti-replay method and system |
| CN114614969A (en)* | 2022-03-15 | 2022-06-10 | 东北林业大学 | Method for judging and coping with attack type in information physical system, electronic equipment and storage medium |
| CN115065503A (en)* | 2022-05-11 | 2022-09-16 | 浪潮云信息技术股份公司 | Method for preventing replay attack of API gateway |
| CN115065553A (en)* | 2022-07-27 | 2022-09-16 | 远江盛邦（北京）网络安全科技股份有限公司 | Single package authentication method and device, electronic equipment and storage medium |
| CN115460598A (en)* | 2021-06-07 | 2022-12-09 | 中移物联网有限公司 | An authentication method, generation method, device end and server end of an offline password |
| CN116094810A (en)* | 2023-01-16 | 2023-05-09 | 西安热工研究院有限公司 | Method and system for defending replay attack |
Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20030067921A1 (en)* | 2001-10-09 | 2003-04-10 | Sanjeevan Sivalingham | Method for time stamp-based replay protection and PDSN synchronization at a PCF |
| US6711677B1 (en)* | 1999-07-12 | 2004-03-23 | Hewlett-Packard Development Company, L.P. | Secure printing method |
| US20050022009A1 (en)* | 2003-06-05 | 2005-01-27 | Aguilera Macros K. | System and method for preventing replay attacks |
| CN1897523A (en)* | 2006-06-26 | 2007-01-17 | 北京金山软件有限公司 | System and method for realizing single-point login |
| US20070234428A1 (en)* | 2006-03-22 | 2007-10-04 | Rash Michael B | Method for secure single-packet remote authorization |
| CN101083530A (en)* | 2007-07-13 | 2007-12-05 | 北京工业大学 | Method for realizing intra-mobile entity authentication and cipher key negotiation using short message |
| CN101394284A (en)* | 2008-11-13 | 2009-03-25 | 四川长虹电器股份有限公司 | One-time password authentication method |
| CN101459516A (en)* | 2009-02-20 | 2009-06-17 | 浙江工业大学 | Dynamic password safe login method |
| CN102035801A (en)* | 2009-09-28 | 2011-04-27 | 西门子（中国）有限公司 | Method and device for preventing attack |
| CN102457482A (en)* | 2010-10-19 | 2012-05-16 | 成都市华为赛门铁克科技有限公司 | Authentication method, device and system |
- 2012
- 2012-06-16CNCN201210200262.3Apatent/CN102739659B/enactiveActive
Patent Citations (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6711677B1 (en)* | 1999-07-12 | 2004-03-23 | Hewlett-Packard Development Company, L.P. | Secure printing method |
| US20030067921A1 (en)* | 2001-10-09 | 2003-04-10 | Sanjeevan Sivalingham | Method for time stamp-based replay protection and PDSN synchronization at a PCF |
| US20050022009A1 (en)* | 2003-06-05 | 2005-01-27 | Aguilera Macros K. | System and method for preventing replay attacks |
| US20070234428A1 (en)* | 2006-03-22 | 2007-10-04 | Rash Michael B | Method for secure single-packet remote authorization |
| CN1897523A (en)* | 2006-06-26 | 2007-01-17 | 北京金山软件有限公司 | System and method for realizing single-point login |
| CN101083530A (en)* | 2007-07-13 | 2007-12-05 | 北京工业大学 | Method for realizing intra-mobile entity authentication and cipher key negotiation using short message |
| CN101394284A (en)* | 2008-11-13 | 2009-03-25 | 四川长虹电器股份有限公司 | One-time password authentication method |
| CN101459516A (en)* | 2009-02-20 | 2009-06-17 | 浙江工业大学 | Dynamic password safe login method |
| CN102035801A (en)* | 2009-09-28 | 2011-04-27 | 西门子（中国）有限公司 | Method and device for preventing attack |
| CN102457482A (en)* | 2010-10-19 | 2012-05-16 | 成都市华为赛门铁克科技有限公司 | Authentication method, device and system |
Non-Patent Citations (2)
| Title |
|---|
| 张韶远等: ""基于生物特征的鲁棒远程用户认证方案"", 《计算机工程》, vol. 38, no. 3, 5 February 2012 (2012-02-05), pages 137 - 138* |
| 戚世杰等: ""增强型相互认证密钥协商方案"", 《计算机工程》, vol. 38, no. 1, 5 January 2012 (2012-01-05), pages 108 - 110* |
Cited By (51)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN104871165A (en)* | 2012-11-20 | 2015-08-26 | Ati科技无限责任公司 | Firmware-implemented software licensing |
| WO2014094237A1 (en)* | 2012-12-18 | 2014-06-26 | Intel Corporation | Techniques associated with server transaction latency information |
| US9503347B2 (en) | 2012-12-18 | 2016-11-22 | Intel Corporation | Techniques associated with server transaction latency information |
| WO2014110774A1 (en)* | 2013-01-18 | 2014-07-24 | Hewlett-Packard Development Company, L.P. | Preventing an input/output blocking attack to a wireless access point |
| US10264013B2 (en) | 2013-01-18 | 2019-04-16 | Hewlett Packard Enterprise Development Lp | Preventing a memory attack to a wireless access point |
| CN103269256B (en)* | 2013-05-10 | 2016-05-04 | 卡斯柯信号有限公司 | The ageing analysis method of message in safe coding communication system |
| CN103269256A (en)* | 2013-05-10 | 2013-08-28 | 卡斯柯信号有限公司 | Security Judgment Method of Message Timeliness in Security Coded Communication System |
| CN106462706A (en)* | 2013-12-31 | 2017-02-22 | 威斯科数据安全国际有限公司 | A method and apparatus for providing client-side score-based authentication |
| CN104092697A (en)* | 2014-07-18 | 2014-10-08 | 杭州华三通信技术有限公司 | Anti-replaying method and device based on time |
| CN104092697B (en)* | 2014-07-18 | 2017-09-15 | 新华三技术有限公司 | A kind of time-based anti-replay method and device |
| CN105119884A (en)* | 2015-07-10 | 2015-12-02 | 深圳市美贝壳科技有限公司 | Method for verifying authority of network communication user |
| CN105635139A (en)* | 2015-12-31 | 2016-06-01 | 深圳市安之天信息技术有限公司 | Anti-overflow-attack document security operation and analysis method and system |
| CN105516186B (en)* | 2015-12-31 | 2019-07-23 | 华为技术有限公司 | A kind of method preventing Replay Attack and server |
| CN105516186A (en)* | 2015-12-31 | 2016-04-20 | 华为技术有限公司 | Method for preventing replay attack and server |
| CN105635139B (en)* | 2015-12-31 | 2019-04-05 | 深圳市安之天信息技术有限公司 | A kind of method and system of the document security operation and analysis of anti-spilled attack |
| CN109155783B (en)* | 2016-05-26 | 2022-02-25 | 维萨国际服务协会 | Reliable Timestamp Credentials |
| CN109155783A (en)* | 2016-05-26 | 2019-01-04 | 维萨国际服务协会 | Reliable Timestamp Credentials |
| CN107623667B (en)* | 2016-07-15 | 2020-05-22 | 腾讯科技（深圳）有限公司 | Data playback judging method and device |
| CN107623667A (en)* | 2016-07-15 | 2018-01-23 | 腾讯科技（深圳）有限公司 | Data playback determination methods and device |
| CN107835145B (en)* | 2016-09-21 | 2019-12-31 | 炫彩互动网络科技有限公司 | Method for preventing replay attack and distributed system |
| CN107835145A (en)* | 2016-09-21 | 2018-03-23 | 炫彩互动网络科技有限公司 | The method and distributed system of a kind of anti-replay-attack |
| CN106548080A (en)* | 2016-10-28 | 2017-03-29 | 鄢碧珠 | A kind of remote data storage method |
| CN106570378A (en)* | 2016-10-28 | 2017-04-19 | 鄢碧珠 | System for improving storage security of user |
| CN106506635A (en)* | 2016-10-28 | 2017-03-15 | 郑建钦 | A kind of portable method for cloud storage |
| CN106570415A (en)* | 2016-10-28 | 2017-04-19 | 郑建钦 | Remote end data storage system |
| CN106909953A (en)* | 2017-03-02 | 2017-06-30 | 重庆砖家宝网络科技发展有限公司 | Time stamp label preparation method and system |
| CN108540513B (en)* | 2017-03-03 | 2021-08-13 | 中国移动通信集团福建有限公司 | Determination method and device for request replay attack |
| CN108540513A (en)* | 2017-03-03 | 2018-09-14 | 中国移动通信集团福建有限公司 | Ask the determination method and device of Replay Attack |
| CN109756460B (en)* | 2017-11-06 | 2021-07-09 | 中移（杭州）信息技术有限公司 | A kind of anti-replay attack method and device |
| CN108809991A (en)* | 2018-06-15 | 2018-11-13 | 北京云枢网络科技有限公司 | A method of the client side verification based on SDK dynamic watermarks |
| CN109379193B (en)* | 2018-12-06 | 2021-06-29 | 佛山科学技术学院 | A dynamic anti-replay attack authentication method and device |
| CN109379193A (en)* | 2018-12-06 | 2019-02-22 | 佛山科学技术学院 | A kind of dynamic anti-replay attack authentication method and device |
| CN110166471A (en)* | 2019-05-28 | 2019-08-23 | 杭州迪普科技股份有限公司 | A kind of portal authentication method and device |
| CN110890960A (en)* | 2019-11-16 | 2020-03-17 | 杭州安恒信息技术股份有限公司 | A Data Replay Attack Recognition and Protection Method Based on Multiple Verification Mechanism |
| CN111259296B (en)* | 2020-01-14 | 2023-03-10 | 武汉极意网络科技有限公司 | Method and system for ensuring ordering of Web resource requests |
| CN111259296A (en)* | 2020-01-14 | 2020-06-09 | 武汉极意网络科技有限公司 | Method and system for ensuring ordering of Web resource requests |
| CN111654451A (en)* | 2020-05-13 | 2020-09-11 | 南京南瑞继保电气有限公司 | Message anti-replay method and electronic equipment |
| CN111654451B (en)* | 2020-05-13 | 2023-03-28 | 南京南瑞继保电气有限公司 | Message anti-replay method and electronic equipment |
| CN112367329A (en)* | 2020-11-17 | 2021-02-12 | 北京知道创宇信息技术股份有限公司 | Communication connection authentication method, communication connection authentication device, computer equipment and storage medium |
| CN112367329B (en)* | 2020-11-17 | 2023-05-02 | 北京知道创宇信息技术股份有限公司 | Communication connection authentication method, device, computer equipment and storage medium |
| CN112711759A (en)* | 2020-12-28 | 2021-04-27 | 山东鲁能软件技术有限公司 | Method and system for preventing replay attack vulnerability security protection |
| CN115460598A (en)* | 2021-06-07 | 2022-12-09 | 中移物联网有限公司 | An authentication method, generation method, device end and server end of an offline password |
| CN113612795A (en)* | 2021-08-18 | 2021-11-05 | 广州科语机器人有限公司 | Replay attack judgment method, Internet of things equipment, electronic equipment and storage medium |
| CN113612795B (en)* | 2021-08-18 | 2025-08-08 | 联云融(北京)科技有限公司 | Replay attack judgment method, Internet of Things device, electronic device and storage medium |
| CN114124374A (en)* | 2021-11-10 | 2022-03-01 | 郭胜群 | Communication anti-replay method and system |
| CN114614969A (en)* | 2022-03-15 | 2022-06-10 | 东北林业大学 | Method for judging and coping with attack type in information physical system, electronic equipment and storage medium |
| CN114614969B (en)* | 2022-03-15 | 2024-03-01 | 东北林业大学 | Method for judging and coping attack type in information physical system, electronic equipment and storage medium |
| CN115065503A (en)* | 2022-05-11 | 2022-09-16 | 浪潮云信息技术股份公司 | Method for preventing replay attack of API gateway |
| CN115065503B (en)* | 2022-05-11 | 2024-05-31 | 浪潮云信息技术股份公司 | Method for preventing replay attack of API gateway |
| CN115065553A (en)* | 2022-07-27 | 2022-09-16 | 远江盛邦（北京）网络安全科技股份有限公司 | Single package authentication method and device, electronic equipment and storage medium |
| CN116094810A (en)* | 2023-01-16 | 2023-05-09 | 西安热工研究院有限公司 | Method and system for defending replay attack |
Also Published As
| Publication number | Publication date |
|---|---|
| CN102739659B (en) | 2015-07-08 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN102739659A (en) | Authentication method for preventing replay attack | |
| CN107395312B (en) | A kind of secure network method for synchronizing time and device | |
| CN105141636B (en) | Suitable for the HTTP safety communicating methods and system of CDN value-added service platforms | |
| CN103026686B (en) | For providing the method and apparatus of one-time password | |
| CN102624740B (en) | A kind of data interactive method and client, server | |
| KR101709456B1 (en) | A method and apparatus for secure trusted time techniques | |
| Yadav et al. | An EAP-based mutual authentication protocol for WLAN-connected IoT devices | |
| CN105681470B (en) | Communication means, server based on hypertext transfer protocol, terminal | |
| CN105530253B (en) | Wireless sensor network access authentication method under Restful framework based on CA certificate | |
| KR20210134655A (en) | Security systems and related methods | |
| US7877503B2 (en) | Method and system for an intercept chain of custody protocol | |
| US20170126410A1 (en) | Method of providing a hash value for a piece of data, electronic device and computer program | |
| CN102647461A (en) | Communication method, server and terminal based on hypertext transfer protocol | |
| JP2005312026A (en) | Signature and verification method for session origination protocol routing header | |
| RU2530691C1 (en) | Method for protected remote access to information resources | |
| US10862690B2 (en) | Technique for handling data in a data network | |
| Chen et al. | An approach to verifying data integrity for cloud storage | |
| US20170155647A1 (en) | Method for setting up a secure end-to-end communication between a user terminal and a connected object | |
| CN111080299B (en) | Anti-repudiation method for transaction information, client and server | |
| CN108600231B (en) | Network security transmission method based on synchronization technology | |
| CN106230587A (en) | Long connection anti-replay attack method | |
| CN107005913B (en) | Verification method, user equipment and the adjacent service functional entity of adjacent service communication | |
| CN104093135B (en) | A kind of RADIUS authentication charging rate method of adjustment and device | |
| Coruh et al. | Hybrid secure authentication and key exchange scheme for M2M home networks | |
| JP3963315B2 (en) | Time authentication method, time authentication request program, and time authentication request device |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |