TWI615735B - Application of the method of hiding network services - Google Patents

Description

Application of the method of hiding network services

The invention relates to a method for writing a hidden network service, in particular to converting a user identification code and a behavior to be performed into a token to improve the security of data transmission.

In recent years, with the popularity of the Internet, more and more businesses are providing various services through the Internet. However, with the rise of the Internet, some unscrupulous people have moved criminal activities to the Internet, exploiting loopholes in the network, and opportunistic. From the profit, network security has also received more and more attention from the public.

In the past, some people proposed to encrypt data in order to achieve the purpose of protection. The encryption methods include symmetric encryption and asymmetric encryption. If the encryption method and key are cracked, the data content will still be known and used for damage. The behavior of the rights and interests, it was proposed to join the random code mechanism to confuse the perpetrators, making it difficult to distinguish the content of the data, and some people proposed to join the check code mechanism to ensure that the data content has not been modified.

Although the above methods can improve the security of the network, the operation method of the network service is basically fixed, that is, the user is informed of the services, and some parameters are added through the website to transmit the data back to the server, or through The selected method writes the subsequent execution actions into the selected item, and the delivery is transmitted in clear code regardless of the content of the service or the data input by the user. If you don't want to be arbitrarily viewed during the delivery process, you need to encrypt the data. If everyone encrypts the same key, the security will be low. If you want to use different keys for different users, Regardless of the encryption method, before the encryption, the user's identity needs to be known to retrieve the corresponding key. Therefore, before encrypting, the user's identity must be known before the corresponding key can be obtained. In the case of the identity of the person, it is impossible to carry out encryption and decryption smoothly.

Even if the data is encrypted, the user's chosen service is presented in clear format, which gives the perpetrators a chance to focus on certain servers that provide specific network services (eg, the bank's website). Attacks, shopping platforms, etc.), because the service content is known, it is possible to know the information necessary for the execution of its service content, so even if the data is encrypted, you can constantly try various attack methods to crack its content, thereby stealing, tampering or Counterfeiting and other criminal activities, in addition to protecting information, it should also protect the current network services to prevent people from attacking specific network services. Therefore, it is very important to propose a way to protect data and network services. necessary.

The primary object of the present invention is to provide a method of applying a hidden network service that hides the currently executing network service.

A secondary object of the present invention is to provide a method for registering a hidden network service, which converts a client identification code and a service code into a token that cannot be directly understood through a code confusion algorithm, and thus cannot What is the current network service in the token?

Another object of the present invention is to provide a method for registering a hidden network service, wherein the token includes a client identifier, so unless the token is lost, the client only needs to perform one login and no longer need to perform the login. Provide an account number and password to reduce the chance that the account and password will be known by a third party.

In order to achieve the above objective, an embodiment of the present invention discloses a method for registering a hidden network service, the method comprising: a client logging in to a server by using an electronic device, the server according to the client Obtaining the corresponding authority generates a token, the token includes one client identifier of the client and a service code corresponding to a service item, and the server has the service item corresponding to the client and the token Transmitting to the electronic device, the electronic device selects the service item, and the electronic device transmits the token corresponding to the service item to the server, and the server performs the service code according to the token and the client identifier Corresponding processing.

In an embodiment of the present invention, when a client logs in to a server using an electronic device, the method includes the following steps: the server sends an initial token to the electronic device, and the initial token includes the corresponding One of the service items logs in to the service code of the service, the client inputs an account number and a password to the electronic device, and transmits the account number, the password and the initial token to the server, the server and the account The password is authenticated with a customer database. When the verification is passed, the server generates the corresponding token according to the corresponding authority of the account.

In an embodiment of the invention, the token generation mode is performed by a code confusion algorithm for character conversion or position exchange.

In an embodiment of the present invention, after the electronic device transmits the token corresponding to the service item to the server, the method includes the following steps: the token is processed by the code obfuscation algorithm after the inverse program processing The client identification code and the service code are obtained in the token.

In an embodiment of the present invention, the server transmits the at least one service item of the authority corresponding to the client and the token to the electronic device, and the token is recorded in a web address or a webpage.

In an embodiment of the present invention, before the electronic device transmits the token corresponding to the service item to the server step, the method further includes the client inputting information to one of the service items corresponding to the electronic device.

In an embodiment of the invention, the token further comprises a random code and a check code.

In an embodiment of the invention, the random code is generated using a random algorithm.

In an embodiment of the invention, the check code is generated by performing a one-bit operation using the random code, the client identifier, and the service code.

In an embodiment of the present invention, after the step of transmitting, by the electronic device, the identifier corresponding to the service item to the server, the method further includes the following steps: the server identifies the client of the token The code, the service code, and the random code perform the bit operation to generate a verification check code, and then compare the check code with the verification check code.

In order to provide a better understanding and understanding of the features and the efficacies of the present invention, the preferred embodiment and the detailed description are as follows:

This embodiment provides a method for writing a hidden network service. The prior art often transmits the currently performed network service to the network in a clear manner, so that a person with a heart can try to obtain the content for a specific network service. Therefore, the present invention proposes to confuse the client identification code and the code of the service item to generate a token to prevent the intentional person from stealing the data. The client ID and the service code are hidden and transmitted by the token, and the token can be saved on the client. Therefore, unless the token is lost, after performing a login verification, the login operation is not required, and the account can be lowered. And the chance that the password was stolen.

The flow of the method for hiding the network service in the first embodiment of the present invention is described herein. Please refer to the first figure, which is the application of the first embodiment of the present invention to the hidden network service. Flow chart of the method. As shown in the figure, the method of the application of the embodiment in the method of hiding the network service includes:

Step S1: login to a server;

Step S3: the server generates a token;

Step S5: transmitting the service item and the token;

Step S7: selecting a service item;

Step S9: transmitting a token corresponding to the service item;

Step S11: Perform corresponding processing according to the token.

Next, a system for implementing the method of the present invention for concealing a network service is described. Please refer to the second figure, which is a system for applying the method of hiding the network service according to the first embodiment of the present invention. schematic diagram. As shown, the system of the present invention for the method of hiding network services includes an electronic device 10, a server 30, and a client database 301.

One of the above electronic devices 10 is a device that can be connected to the Internet, such as a desktop computer, a notebook computer, a smart phone, a personal digital assistant, or a function mobile phone.

One of the above-mentioned customer databases 301 may be located in the server 30 or in an external server. This is only a preferred embodiment, but the arrangement is not limited thereto.

In the following, the flow of the application of the first embodiment of the present invention to the hidden network service will be described. Please refer to the first figure and the second figure. When an electronic device 10 is connected to a server 30 via a network, steps S1 to S11 are performed.

In step S1, when an electronic device 10 is connected to the login page of the server 30, the login page includes an initial token transmitted to the electronic device 10. After the client enters the account number and password on the login page, the account number, password, and The initial token is transmitted to the server 30.

In an embodiment of the present invention, in step S1, the initial token includes a service code representing a login service.

In step S3, the server 30 obtains a service code from the initial token, and learns that the current pre-execution service is a login service, and the server 30 performs identity verification according to the account number and password and the customer database 301, and after passing the identity verification. The corresponding amount of the service will be generated according to the service that can be exercised according to the corresponding authority of the account.

In an embodiment of the present invention, in step S3, the token includes a client identification code and a service code of the corresponding service item, and is generated by a code confusion algorithm.

In step S5, the server 30 transmits the extensible service items and tokens to the electronic device 10 according to the rights of the account.

In an embodiment of the present invention, in step S5, the token is recorded in a web address or a web page.

In step S7, the pre-made service item is selected in the electronic device 10.

In step S9, the electronic device 10 transmits a token corresponding to the selected service item to the server 30.

In an embodiment of the present invention, in step S9, the server 30 processes the token as an inverse program of the code obfuscation algorithm, and obtains the client identifier and the service code from the token.

In step S11, the server 30 performs corresponding processing according to the service code and the client identification code in the token.

In this case, the method for writing the application identifier of the first embodiment of the present invention to the hidden network service is completed. After the server receives the account and password transmitted by the client and performs identity verification, the server can perform the operation according to the authority corresponding to the account. The service item generates a token including the client identifier and the service code, and the service item selected by the client returns the corresponding token to the server, so the server can learn the action to be performed from the token. Because the client identification code and the service code are hidden in the token, it is not easy for the person concerned to guess and crack the data content according to the service item, and improve the security of the data transmission in the network. It can be applied to the inquiry service after the account is logged in, but is not limited to this application.

The following is a description of the method for implementing the second embodiment of the present invention in the hidden network service. Referring to the second and third figures, the flow of the embodiment differs from the first embodiment in that: In the process, the token generated in step S3 further includes a random code and a check code, and the random code is generated by a random algorithm, and the check code uses a random code, a client identifier, and a service element with a bit. An operation is generated, and the embodiment includes a step S10.

In step S10, the integrity of the token is checked, and after the server 30 receives the transmitted token and performs the inverse procedure of the code obfuscation algorithm, the server 30 obtains the client identifier, the service code, and the random code from the token. The bit operation produces a verification check code, and then the check code in the match check is consistent with the verification check code to confirm the integrity.

With the embodiment, the random code added by the token is different every time, so that the uniqueness of the token can be guaranteed and the content of the token cannot be predicted. If the check code is added, it can be checked whether the token has been tampered with during the transmission. To ensure the integrity of the data, the security of data transmission is further improved.

The method for the application of the hidden network service in the third embodiment of the present invention is described. Referring to the second and fourth figures, the process of this embodiment differs from the first embodiment in that: this embodiment In the flow, step S71 and step S91 replace step S7 and step S9, respectively.

In step S71, the service item and the input information are selected. After the electronic device 10 selects the pre-made service item, the client needs to fill in an input information according to the selected service item, and the input information is executed by the server 30. Information required for this service.

In step S91, the token of the corresponding service item and the input information are transmitted, and the electronic device 10 transmits the input information corresponding to the selected service item and the input information of the client's selection to the server 30.

With this embodiment, the client can transmit different information to the server, so that the server can perform different services according to the client's requirements. It can be applied to applications such as transfer, electronic payment, etc., but is not limited to this application.

The method for the application of the hidden network service in the fourth embodiment of the present invention is described. Referring to the second and fifth figures, the difference between the flow of this embodiment and the second embodiment is: this embodiment In the process, the steps S71 and S91 are replaced by the steps S7 and S9, respectively, and the steps S71 and S91 are the same as the third embodiment, and therefore will not be described again.

The above is only the preferred embodiment of the present invention, and is not intended to limit the scope of the present invention, and the variations, modifications, and modifications of the shapes, structures, features, and spirits described in the claims of the present invention. All should be included in the scope of the patent application of the present invention.

The invention is based on the novelty, the progressiveness and the availability of the industrial use, and should conform to the patent application requirements stipulated in the Patent Law of China, and the invention patent application is filed according to law, and the prayer bureau will grant the patent as soon as possible. prayer.

10‧‧‧Electronic devices

30‧‧‧Server

301‧‧‧Customer Database

The first figure is a flowchart of a method for hiding a network service according to a first embodiment of the present invention; the second figure is an application of the first embodiment of the present invention to a hidden network. A schematic diagram of a system for a method of road service; a third diagram: a flowchart of a method for hiding a network service in a second embodiment of the present invention; and a fourth diagram: a third implementation of the present invention A flow chart of a method for hiding a network service; and a fifth diagram: a flowchart of a method for hiding a network service according to a fourth embodiment of the present invention.

Claims (9)

A method for registering a hidden network service, the method comprising: a client logging in to a server using an electronic device; the server sending an initial token to the electronic device, the initial token comprising a corresponding one One of the service items is a service code of the login service; the client inputs an account number and a password to the electronic device, and transmits the account number, the password and the initial token to the server; the server uses the account and the account The password is authenticated with a customer database; after the verification is passed, the server generates a token according to the corresponding authority of the account; the token includes one of the client identifiers of the client and the corresponding service item a service code; the server transmits the service item and the token corresponding to the client to the electronic device; the electronic device selects the service item; the electronic device transmits the token corresponding to the service item to the The server; and the server performs corresponding processing according to the service code of the token and the client identifier. The application described in claim 1 is for the method of hiding a network service, wherein the token generation method performs character conversion or location exchange by a code confusion algorithm. The method of claim 2, wherein the electronic device transmits the token corresponding to the service item to the server, and the following steps are included: the token is used by the electronic device to transmit the identifier corresponding to the service item to the server. The code obfuscation algorithm performs inverse program processing; and the client identifier and the service code are obtained from the token. The method of claim 1, wherein the server transmits the at least one service item corresponding to the client and the token to the electronic device. The token is recorded on a web address or a web page. The method of claim 1, wherein the application further includes the client before the electronic device transmits the token corresponding to the service item to the server step. The electronic device inputs information corresponding to one of the service items. The method of claim 1, wherein the identifier further comprises a random code and a check code. The application described in claim 6 is for the method of hiding a network service, wherein the random code is generated by a random algorithm. The method of claim 6, wherein the check code is generated by performing a one-bit operation using the random code, the client identifier, and the service code. The method of claim 8, wherein the application is recorded in the hidden network service, wherein after the electronic device transmits the token corresponding to the service item to the server, the method further comprises the following steps: The server performs the bit operation on the client identifier, the service code and the random code to generate a verification check code; and whether the check code of the token matches the verification check code.