Filtering method and device of HTTPS (Hyper Text Transfer Protocol) encrypted website, and computer equipment thereof

Abstract

The invention relates to the filtering method and device of HTTPS encrypted website, and a computer equipment thereof, and belongs to the technical field of communication security. The method comprises the steps of: acquiring an encrypted data packet sent to the HTTPS encrypted website; analyzing an IP (Internet Protocol) address in the encrypted data packet; matching the analyzed IP address with an IP address with a blacklist identifier and / or an IP address with a whitelist identifier; when the analyzed IP address is successfully matched with the IP address with the blacklist identifier, blocking the corresponding encrypted data packet; and when analyzed IP address is successfully matched with the IP address with the whitelist identifier, releasing the corresponding encrypted data packet. The method provided by the invention analyzes the unencrypted IP address in the encrypted data packet and matches the IP address with the IP addresses in the prestored blacklist and the whitelist; if the IP address is matched with the IP addresses in the prestored blacklist and the whitelist, the corresponding data packet can be filtered according to the matched blacklist or whitelist; and thus, the visit to the encrypted URL (Uniform Resource Locator) website can be filtered.

Description

technical field [0001] The invention relates to the technical field of communication security, in particular to an HTTPS encrypted website filtering method, device and computer equipment thereof. Background technique [0002] In communication technology, especially in the field of firewall security, filtering URL (Uniform Resource Locator) website is a very important function with a wide range of applications. [0003] The traditional cable modem mainly uses packet capture tools to filter URLs. This filtering function is mainly to insert breakpoints before the hardware abstraction interface and data forwarding module to obtain data packets for analysis and determine whether the data packets need is filtered. [0004] However, the traditional method of inserting breakpoints and intercepting data packets can only be applied to the analysis of unencrypted data packets in the HTTP hypertext transfer protocol, but not applicable to the analysis and analysis of encrypted data pac...

AI Technical Summary

Problems solved by technology

[0006] Based on this, it is necessary to provide a filtering method, device and computer equipment for HTTPS encrypted URLs for the problem that HTTPS-type URLs that transmit data in encrypted form cannot be filtered.

Images