Request data verification system and method

Abstract

The embodiment of the invention discloses a request data verification system and method. The method comprises the steps that a universal interceptor receives request data transmitted by a user from anextranet platform to an intranet platform, carries out first-dimensional verification on the request data, and continues to transmit the request data; a form field interceptor receives the request data transmitted from the universal interceptor, verifies page form information of the request data and then continues to transmit the request data; a logic interceptor receives the request data transmitted from the form field interceptor, and transmits the request data to the intranet platform after verifying an application programming interface of the request data; and after the request data is intercepted, the intercepted position of the request data is displayed through a data interception prompter. Therefore, the security of accessing the intranet service by the extranet platform is improved, the cost of accessing the platform by the intranet system is reduced, and the access efficiency is improved.

Description

technical field [0001] The invention relates to the field of network security, in particular to a verification system and method for request data. Background technique [0002] Most of the intranet systems are used internally by the enterprise. After being crawled by a reverse proxy or crawler, the business of the intranet platform can be accessed through the external network platform. When accessing, the requested data after access needs to be imported into the intranet system, but When the request data is fed back to the intranet platform, less security is dealt with, and there are various security risks. If it is maliciously attacked, it will be disastrous, so effective protection must be achieved. From the perspective of the system level, the security guarantee should be guaranteed by the business system itself. When accessing the intranet business through the external network platform, due to the large number of access systems, the development teams and business lines o...

AI Technical Summary

Problems solved by technology

[0002] Most of the intranet systems are used internally by the enterprise. After being crawled by a reverse proxy or crawler, the business of the intranet platform can be accessed through the external network platform. When accessing, the requested data after access needs to be imported into the intranet system, but When the request data is fed back to the intranet platform, less security is dealt with, and there are various security risks. If it is maliciously attacked, it will be disastrous, so effective protection must be achieved

From the system level, the security guarantee should be guaranteed by the business system itself. When accessing the intranet business through the external network platform, due to the large number of access systems, the development teams and business lines of each business system are different, and it is carried out according to the standard. In the case of security transformation, the communication, design, development, testing, and scheduling time are too long and cumbersome, and because the connected systems are constantly increasing according to business changes, this kind of development work will be endless for a long time, resulting in intranet system access. The cost of entering the platform is high, and greatly affects the efficiency of system opening. How to design a method to verify the request data during the process of feeding back the request data to the intranet platform requires further technological innovation.

Images