User permission control method and device based on url fingerprint technology

Abstract

The present invention provides a user authority control method and device based on URL fingerprinting technology, wherein the method includes: obtaining the user's local cookie information and the page URL requested by the user according to the user's access request; performing fingerprinting according to the user's local cookie information and the page URL The signature generates an encrypted page URL and returns it to the user; fingerprint verification is performed on the encrypted page URL according to the user's access request to the encrypted page URL to determine the user's access authority. Through the present invention, the coupling between user authority control and business logic can be reduced, the security level of the entire system can be improved, and important information of users can be protected.

Description

technical field [0001] The present invention relates to the technical field of Internet user authority control, and more specifically, to a user authority control method and device based on URL fingerprint technology. Background technique [0002] With the progress of society and the development of technology, the Internet has been popularized in people's lives and has become a part of people's lives. [0003] At present, the network identity verification method is mainly based on "ID+password". Accuracy and Safety. The Chinese patent application with the application number 200710163458.9 discloses a method of Internet identity verification, using fingerprint verification as the main means of identity verification, and at the same time adopting two-way identity verification between the WEB server and the client, limiting the time limit for fingerprint feature codes, and generating COOKIE takes these measures to mark the identity of the user to achieve the reliability of th...

AI Technical Summary

Problems solved by technology

[0005] 1) The business logic of the system is easy to omit to add permission verification, resulting in code redundancy of the subsystem;

[0006] 2) Users can tamper with the URL of the page at will, resulting in SQL injection security holes and malicious attacks on the page;

[0007] 3) The implementation scheme of user authority control will cause unnecessary queries to the database

Images