首页> 外国专利> HTTPS MITM METHOD FOR EVADING MITM ATTACK FOR HTTPS PROTOCOL

HTTPS MITM METHOD FOR EVADING MITM ATTACK FOR HTTPS PROTOCOL

机译:评估HTTPS协议的MITM攻击的HTTPS MITM方法

摘要

Disclosed is a method of operating a terminal communicating with a server based on an HTTPS protocol. A method of operating a terminal according to an embodiment includes the steps of: receiving first information about a public key of a server from a server based on an OTP generation logic shared with a server; Receiving a certificate provided by the server in response to a connection request to the server; Verifying the public key included in the certificate by comparing the second information and the first information about the public key included in the certificate; Encrypting a secret key for secure communication with the server with a public key and transmitting the encrypted key to the server according to the verification resu And performing secure communication with the server based on the secret key.
机译:公开了一种基于HTTPS协议来操作与服务器进行通信的终端的方法。根据实施例的操作终端的方法包括以下步骤:基于与服务器共享的OTP生成逻辑,从服务器接收关于服务器的公共密钥的第一信息;接收服务器响应于对服务器的连接请求而提供的证书;通过比较证书中包括的第二信息和第一信息来验证证书中包括的公钥;用公钥对用于与服务器进行安全通信的秘密密钥进行加密,并根据验证结果将加密后的密钥发送给服务器;并基于密钥执行与服务器的安全通信。

著录项

  • 公开/公告号KR102145679B1

    专利类型

  • 公开/公告日2020-08-18

    原文格式PDF

  • 申请/专利权人 주식회사 엘지유플러스;

    申请/专利号KR20190002583

  • 发明设计人 류정수;전종운;

    申请日2019-01-09

  • 分类号H04L29/06;H04L29/08;H04L9/06;H04L9/08;

  • 国家 KR

  • 入库时间 2022-08-21 11:04:02

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号