Secure communication method and apparatus
AssigneeRiver Security Inc.
InventorsYumin LIN, Hongyong XIAO, Lin ZHENG, Ming Xu
Life of this patent
Estimating the term…
Abstract
The present invention provides a secure communication method and apparatus. A security proxy device is arranged between a client and a server; after receiving data returned by the server to the client, the security proxy device assigns a token to the client, and sends the token, the data returned by the server to the client and an execution module to the client; receives a request which the execution module running at the client uses the token to send, verifies the token, and forwards the request to the server if the validation succeeds. The present invention improves security of communication between the client and the server, and can protect the server from various automated attacks.
Claims24
A secure communication method, wherein the method is executed by a security proxy device between a client and a server, the method comprising:
- S1:
- after receiving data returned by the server to the client, assigning a token to the client, and sending the token, the data returned by the server to the client and an execution module to the client;
- S2:
- receiving a request which the execution module running at the client uses the token to send, validating the token, and forwarding the request to the server if the validation succeeds.
A secure communication apparatus, wherein the apparatus is between a client and a server, the apparatus comprising:
- a response processing unit, a token management unit and a request processing unit;
- the response processing unit is used to receive data returned by the server to the client, and send the token assigned to the client, the data returned by the server to the client and an execution module to the client;
- the token management unit is used to assign the token to the client after the response processing unit receives the data returned by the server to the client;
- verify the token provided by the request processing unit;
- the request processing unit is used to receive a request which the execution module running at the client uses the token to send, provide the token to the token management unit, and forward the request to the server if the token validation succeeds.
Dependencies are inferred from the claim text.