首页> 外国专利> HTTPS MITM METHOD FOR EVADING MITM ATTACK FOR HTTPS PROTOCOL

HTTPS MITM METHOD FOR EVADING MITM ATTACK FOR HTTPS PROTOCOL

机译:评估HTTPS协议的MITM攻击的HTTPS MITM方法

摘要

A method of operating a terminal communicating with a server based on the HTTPS protocol is disclosed. A method of operating a terminal according to an embodiment includes receiving first information about a server's public key from a server based on OTP generation logic shared with the server; Receiving a certificate provided by the server in response to a request to access the server; Verifying the public key included in the certificate by comparing the second information and the first information regarding the public key included in the certificate; According to the verification result, encrypting the secret key for secure communication with the server with a public key and transmitting to the server; And performing secure communication with the server based on the secret key.
机译:公开了一种基于HTTPS协议来操作与服务器进行通信的终端的方法。根据实施例的操作终端的方法包括:基于与服务器共享的OTP生成逻辑,从服务器接收关于服务器的公钥的第一信息;接收服务器响应访问服务器的请求而提供的证书;通过比较关于证书中包括的公共密钥的第二信息和第一信息来验证证书中包括的公共密钥;根据验证结果,用公钥加密用于与服务器进行安全通信的秘密密钥,并发送给服务器;并基于密钥执行与服务器的安全通信。

著录项

  • 公开/公告号KR20200086436A

    专利类型

  • 公开/公告日2020-07-17

    原文格式PDF

  • 申请/专利权人 주식회사 엘지유플러스;

    申请/专利号KR20190002583

  • 发明设计人 류정수;전종운;

    申请日2019-01-09

  • 分类号H04L29/06;H04L29/08;H04L9/06;H04L9/08;

  • 国家 KR

  • 入库时间 2022-08-21 11:06:25

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号