CN116094786A - Data processing method, system, device and storage medium based on double-factor protection - Google Patents

Abstract

The invention discloses a data processing method, system, device and storage medium based on two-factor protection, comprising: using a request protocol packet as a request parameter to generate a check value according to a preset algorithm; and performing the request parameter according to a preset rule Sorting to generate a parameter string; generating an encryption summary of the parameter string and the check value according to an encryption function, and generating a dynamic check factor according to the check value and the encryption summary; the encryption function is an irreversible encryption function; generate request information according to the dynamic check factor, and send the request information to the server, so that the server verifies the request information according to the check value and the encrypted digest, and determines Whether the request information is a replay attack. The embodiment of the present invention can improve the effectiveness of anti-replay attack, and can be widely used in the field of computer technology.

Description

Data processing method, system, device and storage medium based on two-factor protection

technical field

The present invention relates to the field of computer technology, in particular to a data processing method, system, device and storage medium based on two-factor protection.

Background technique

Replay attack, also known as replay attack, replay attack or freshness attack, refers to an attack behavior in which an attacker steals messages or message fragments in a previously running protocol or a currently running protocol to deceive the current protocol operation, thereby destroying The purpose of network protocol security, hindering normal communication, and consuming network resources, and replay attacks may occur in any network communication process, so it is imperative to prevent replay attacks. Usually to prevent replay attacks, you can set freshness in the request message to identify whether the message is a replay message. Common methods for setting the freshness of request messages are: based on timestamp and based on sequence number. However, there are omissions in the freshness methods of the above-mentioned setting request message, and the effectiveness of preventing replay attacks needs to be improved.

Contents of the invention

In view of this, the purpose of the embodiments of the present invention is to provide a data processing method, system, device and storage medium based on two-factor protection, which can improve the effectiveness of preventing replay attacks.

In the first aspect, the embodiment of the present invention provides a data processing method based on two-factor protection, which is applied to the client, including:

According to the preset algorithm, the request protocol packet is used as the request parameter to generate the check value;

Sorting the request parameters according to preset rules to generate a parameter string;

Generating an encrypted summary of the parameter character string and the check value according to an encryption function, and generating a dynamic check factor according to the check value and the encrypted summary; the encryption function is an irreversible encryption function;

Generate request information according to the dynamic check factor, and send the request information to the server, so that the server can verify the request information according to the check value and the encryption digest, and determine the Whether the request information is a replay attack; wherein, when the request is successful, the check value is saved in the cache.

Optionally, the generating a check value using the request protocol packet as a request parameter according to a preset algorithm specifically includes:

According to the hash algorithm, the request protocol packet will be used as the request parameter to generate the Hash value.

Optionally, sorting the request parameters according to preset rules specifically includes:

Sort the request parameters in alphabetical order or ASCII code order.

In the second aspect, the embodiment of the present invention provides a data processing method based on two-factor protection, which is applied to the server, including:

receiving the request information sent by the client, and determining a dynamic verification factor according to the request information; the dynamic verification factor includes a verification value and an encryption summary;

Query whether the check value exists in the cache;

If the check value exists in the cache, the request information is a replay attack;

If the check value does not exist in the cache, verify the encrypted digest, and determine whether the request information is a replay attack according to a verification result.

Optionally, the verifying the encrypted digest, and determining whether the request information is a replay attack according to the verification result, specifically includes:

Determine a parameter string and a check value according to the request information, and generate a verification summary for the parameter string and the check value according to an encryption algorithm;

comparing the verification digest with the encryption digest;

If the verification digest is consistent with the encryption digest, the request information is not a replay attack;

If the verification digest is inconsistent with the encryption digest, the request information is a replay attack.

In the third aspect, the embodiment of the present invention provides a data processing system based on two-factor protection, which is applied to the client, including:

The first module is used to use the request protocol packet as a request parameter to generate a check value according to a preset algorithm;

The second module is configured to sort the request parameters according to preset rules to generate a parameter string;

The third module is used to generate an encrypted summary of the parameter string and the check value according to an encryption function, and generate a dynamic check factor according to the check value and the encrypted summary; the encryption function is an irreversible encryption function;

A fourth module, configured to generate request information according to the dynamic check factor, and send the request information to the server, so that the server can process the request information according to the check value and the encrypted digest Perform verification to determine whether the request information is a replay attack; wherein, when the request is successful, save the check value in the cache.

In the fourth aspect, the embodiment of the present invention provides a data processing system based on two-factor protection, which is applied to the server, including:

The fifth module is used to receive the request information sent by the client, and determine the dynamic verification factor according to the request information; the dynamic verification factor includes a verification value and an encryption summary;

The sixth module is used to query whether the check value exists in the cache;

The seventh module is used to determine that the request information is a replay attack if the check value exists in the cache;

An eighth module, configured to verify the encryption digest if the check value does not exist in the cache, and determine whether the request information is a replay attack according to the verification result.

In the fifth aspect, the embodiment of the present invention provides a data processing device based on two-factor protection, including:

at least one processor;

at least one memory for storing at least one program;

When the at least one program is executed by the at least one processor, the at least one processor is made to implement the method described in the embodiment of the first aspect or the embodiment of the second aspect.

In a sixth aspect, an embodiment of the present invention provides a computer-readable storage medium, which stores a processor-executable program, and the processor-executable program is used to perform the implementation of the above-mentioned first aspect when executed by a processor. example or the method described in the embodiment of the second aspect.

In the seventh aspect, the embodiment of the present invention provides a data processing system based on two-factor protection, including a client and a server, and the client and the server are connected by communication, wherein,

The client is configured to implement the method described in the embodiment of the first aspect;

The server is configured to implement the method described in the embodiment of the second aspect.

Implementing the embodiment of the present invention includes the following beneficial effects: In this embodiment, the client first generates a check value for the request parameter according to a preset algorithm, and generates a parameter string for the request parameter, and then converts the parameter string and the check value according to the encryption function Generate an encrypted digest, and generate a dynamic check factor based on the check value and the encrypted digest, add the dynamic check factor to the request information and send it to the server; after receiving the request information, the server parses the dynamic check factor in the request information, And verify the check value and encryption summary in the dynamic check factor respectively to determine whether the request information is a replay attack; therefore, the interface between the client and the server forms a two-factor protection through the check value and the encryption summary The verification method builds a defense mechanism to prevent replay attacks, effectively prevents replay attacks, improves interface communication security, and greatly improves the intelligence level of application security protection.

Description of drawings

Fig. 1 is a structural block diagram of a data processing system based on two-factor protection provided by an embodiment of the present invention;

Fig. 2 is a schematic flowchart of steps of a data processing method applied to a client provided by an embodiment of the present invention;

FIG. 3 is a structural block diagram of a data processing system applied to a client provided by an embodiment of the present invention;

FIG. 4 is a schematic flowchart of steps of a data processing method applied to a server provided by an embodiment of the present invention;

FIG. 5 is a structural block diagram of a data processing system applied to a server provided by an embodiment of the present invention;

Fig. 6 is a structural block diagram of a data processing device based on two-factor protection provided by an embodiment of the present invention;

Fig. 7 is a flowchart of another data processing method based on two-factor protection provided by an embodiment of the present invention.

Detailed ways

The present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. For the step numbers in the following embodiments, it is only set for the convenience of illustration and description, and the order between the steps is not limited in any way. The execution order of each step in the embodiments can be adapted according to the understanding of those skilled in the art sexual adjustment.

In the following description, references to "some embodiments" describe a subset of all possible embodiments, but it is understood that "some embodiments" may be the same subset or a different subset of all possible embodiments, and Can be combined with each other without conflict.

In the following description, the term "first\second\third" is only used to distinguish similar objects, and does not represent a specific ordering of objects. Understandably, "first\second\third" Where permitted, the specific order or sequence may be interchanged such that the embodiments of the invention described herein can be practiced in sequences other than those illustrated or described herein.

Unless otherwise defined, all technical and scientific terms used in the embodiments of the present invention have the same meaning as commonly understood by those skilled in the technical field of the present invention. The terms used in the embodiments of the present invention are only for the purpose of describing the embodiments of the present invention, and are not intended to limit the present invention.

Before further describing the embodiments of the present invention in detail, the nouns and terms involved in the embodiments of the present invention are described, and the nouns and terms involved in the embodiments of the present invention are applicable to the following explanations.

Referring to Fig. 1, in the embodiment of the present invention, the client and the server communicate through an interface. The communication method can be wired communication or wireless communication. The client sends request information to the server, and the server determines whether it is a replay attack according to the request information. , to determine the validity of the requested information.

As shown in FIG. 2 , the embodiment of the present invention provides a data processing method based on two-factor protection, which is applied to a client, including steps S100 to S400.

S100. Generate a check value by using the request protocol packet as a request parameter according to a preset algorithm.

It should be noted that the preset algorithm is determined according to an actual application, and is not specifically limited in this embodiment. The check value is determined by the request parameters and the selected preset algorithm. Different preset algorithms correspond to different check values. For example, the check value corresponding to the hash algorithm is a Hash value.

Optionally, the generating a check value using the request protocol packet as a request parameter according to a preset algorithm specifically includes:

S110, using the request protocol packet as a request parameter to generate a Hash value according to a hash algorithm.

Specifically, when the preset algorithm selects the hash algorithm, the client calculates the Hash value obtained by performing the Hash algorithm on the protocol packet requested each time.

S200. Sorting the request parameters according to preset rules to generate a parameter string.

It should be noted that the preset rule is a certain agreed sorting rule, and the preset rule is determined according to an actual application, which is not specifically limited in this embodiment.

Optionally, sorting the request parameters according to preset rules specifically includes:

S210. Sort the request parameters according to the order of initial letters or the order of ASCII codes.

Specifically, the request parameters are sorted in alphabetical order, ASCII code order, or an agreed specific order.

S300. Generate an encryption digest from the parameter string and the check value according to an encryption function, and generate a dynamic check factor according to the check value and the encryption digest; the encryption function is an irreversible encryption function.

It should be noted that the encryption function is an irreversible encryption function agreed upon by the client and the server, including but not limited to the commonly used MD5 encryption function.

Specifically, each time a request is made, the client uses an encryption function to encrypt the sorted string of client request parameters + Hash values to generate an encrypted digest, and generates a dynamic check factor based on the check value and the encrypted digest.

S400. Generate request information according to the dynamic check factor, and send the request information to the server, so that the server can verify the request information according to the check value and the encryption digest, and determine Whether the request information is a replay attack; wherein, when the request is successful, the check value is saved in the cache.

Specifically, the position of the dynamic check factor in the request message includes but is not limited to the header of the request message, the body of the request message, and the like. The client adds the dynamic verification factor to the original request message to obtain the request information, and sends the request information to the server; after receiving the request information, the server verifies the verification value and encrypted summary according to the dynamic verification factor in the request information Validation is performed to determine if the requested information is a replay attack.

It should be noted that after each successful request, the server saves the Hash value to the Redis cache. The Redis cache is used to store the Hash value of the dynamic verification factor of the verified request information.

Implementing the embodiment of the present invention includes the following beneficial effects: In this embodiment, the client first generates a check value for the request parameter according to a preset algorithm, and generates a parameter string for the request parameter, and then converts the parameter string and the check value according to the encryption function Generate an encrypted digest, and generate a dynamic check factor based on the check value and the encrypted digest, add the dynamic check factor to the request information and send it to the server, so that the server can verify the dynamic check factor in the request information to Determine whether the requested information is a replay attack; therefore, a two-factor protection interface verification method is formed between the client and the server through the check value and encrypted summary, and a defense mechanism to prevent replay attacks is built to effectively prevent replay attacks and improve the interface Communication security greatly improves the intelligent level of application security protection.

Referring to Fig. 3, the embodiment of the present invention provides a data processing system based on two-factor protection, which is applied to the client, including:

The first module is used to use the request protocol packet as a request parameter to generate a check value according to a preset algorithm;

The second module is configured to sort the request parameters according to preset rules to generate a parameter string;

The third module is used to generate an encrypted summary of the parameter string and the check value according to an encryption function, and generate a dynamic check factor according to the check value and the encrypted summary; the encryption function is an irreversible encryption function;

A fourth module, configured to generate request information according to the dynamic check factor, and send the request information to the server, so that the server can process the request information according to the check value and the encrypted digest Perform verification to determine whether the request information is a replay attack; wherein, when the request is successful, save the check value in the cache.

It can be seen that the content in the above-mentioned embodiment of the method applied to the client is applicable to the embodiment of the system, and the functions realized by the embodiment of the system are the same as those of the embodiment of the method applied to the client, and the beneficial effects achieved are similar to those of the above-mentioned application The beneficial effect achieved by the method embodiment of the client is also the same.

Referring to FIG. 4 , an embodiment of the present invention provides a data processing method based on two-factor protection, which is applied to a server, including steps S500 to S800.

S500. Receive request information sent by the client, and determine a dynamic check factor according to the request information; the dynamic check factor includes a check value and an encrypted digest.

Specifically, after receiving the request information sent by the client, the server extracts a dynamic verification factor from the request information, and the dynamic verification factor includes a verification value and an encrypted digest.

S600. Query whether the check value exists in the cache.

Specifically, the server queries whether the check value exists in the Redis cache, and judges whether the request is a replay attack based on the presence of the check value in the Redis cache. The query method can pass the matching verification.

S700. If the check value exists in the cache, the request information is a replay attack.

Specifically, if the above check value exists in the Redis cache, the request information is a replay attack, and the request information is invalid; if the above check value does not exist in the Redis cache, the request information is non-replay attack. If the attack is released, it means that the requested information is valid, and further verification of the encrypted digest is required.

S800. If the check value does not exist in the cache, verify the encrypted digest, and determine whether the request information is a replay attack according to a verification result.

Specifically, when it is not possible to determine whether the request information is a replay attack based on the check value, the server generates the encryption digest of the server according to the encryption digest generation rules of the client, and then compares it with the encryption digest sent by the client, and determines the request information according to the comparison result Whether it is a replay attack.

Optionally, the verifying the encrypted digest, and determining whether the request information is a replay attack according to the verification result, specifically includes:

S810. Determine a parameter character string and a verification value according to the request information, and generate a verification digest from the parameter character string and the verification value according to an encryption algorithm;

S820. Compare the verification digest with the encryption digest;

S830. If the verification digest is consistent with the encryption digest, the request information is not a replay attack;

S840. If the verification digest is inconsistent with the encryption digest, the request information is a replay attack.

Specifically, the server receives the Hash value and request parameters in the dynamic verification factor; then the server sorts the parameters in the client request according to the sorting rules to obtain the sorted parameter strings, and then the server sorts the parameter strings according to the encryption function String, timestamp, and random number Hash value generate an encrypted digest on the server according to the encryption algorithm, and compare it with the encrypted digest in the dynamic check factor. If they are inconsistent, it means that this request has been tampered with, and it is judged that this request is information tampered Attack, if they match, it means that the request is valid, the anti-replay check passes, and the server can process business.

It should be noted that if the request has passed the verification of the above Hash value and encrypted digest, the server will store the Hash value in the dynamic verification factor into the Redis cache. Hash value verification: The server matches in the cache according to the Hash value. If the same value is not matched, the verification passes. Encryption Digest Verification: The server generates the server’s encryption digest according to the client’s encryption digest generation rules, and then compares it with the client’s encryption digest. If they are consistent, the verification passes.

Implementing the embodiment of the present invention includes the following beneficial effects: In this embodiment, the client first generates a check value for the request parameter according to a preset algorithm, and generates a parameter string for the request parameter, and then converts the parameter string and the check value according to the encryption function Generate an encrypted digest, and generate a dynamic check factor based on the check value and the encrypted digest, add the dynamic check factor to the request information and send it to the server; after receiving the request information, the server parses the dynamic check factor in the request information, And respectively verify the check value and encryption summary in the dynamic check factor to determine whether the request information is a replay attack; therefore, the interface between the client and the server forms a two-factor protection through the check value and the encryption summary The verification method builds a defense mechanism to prevent replay attacks, effectively prevents replay attacks, improves interface communication security, and greatly improves the intelligence level of application security protection.

Referring to Figure 5, an embodiment of the present invention provides a data processing system based on two-factor protection, which is applied to the server, including:

The fifth module is used to receive the request information sent by the client, and determine the dynamic verification factor according to the request information; the dynamic verification factor includes a verification value and an encryption summary;

The sixth module is used to query whether the check value exists in the cache;

The seventh module is used to determine that the request information is a replay attack if the check value exists in the cache;

An eighth module, configured to verify the encryption digest if the check value does not exist in the cache, and determine whether the request information is a replay attack according to the verification result.

It can be seen that the content in the above-mentioned method embodiment applied to the server is applicable to this system embodiment, and the functions implemented by this system embodiment are the same as those of the above-mentioned method embodiment applied to the server, and the beneficial effects achieved are similar to those applied to the system embodiment. The beneficial effects achieved by the embodiment of the method at the server end are also the same.

In the fifth aspect, the embodiment of the present invention provides a data processing device based on two-factor protection, including:

at least one processor;

at least one memory for storing at least one program;

When the at least one program is executed by the at least one processor, the at least one processor is made to implement the above method applied to the client or the method applied to the server.

Wherein, the memory, as a non-transitory computer-readable storage medium, can be used to store non-transitory software programs and non-transitory computer executable programs. The memory may include high-speed random access memory, and may also include non-transitory memory, such as at least one magnetic disk storage device, flash memory device, or other non-transitory solid-state storage devices. In some embodiments, the memory may optionally include remote memory located remotely from the processor, and these remote memories may be connected to the processor through a network. Examples of the aforementioned networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

It can be seen that the content in the above-mentioned method embodiment is applicable to this device embodiment, and the functions realized by this device embodiment are the same as those of the above-mentioned method embodiment, and the beneficial effects achieved are also the same as those achieved by the above-mentioned method embodiment. same.

In addition, the embodiment of the present application also discloses a computer program product or computer program, and the computer program product or computer program is stored in a computer-readable storage medium. The processor of the computer device can read the computer program from the computer-readable storage medium, and the processor executes the computer program, so that the computer device executes the above method. Similarly, the content in the above-mentioned method embodiments is applicable to this storage medium embodiment. The functions realized by this storage medium embodiment are the same as those of the above-mentioned method embodiments, and the beneficial effects achieved are the same as those achieved by the above-mentioned method embodiments. The beneficial effects are also the same.

An embodiment of the present invention also provides a computer-readable storage medium, the computer-readable storage medium stores a processor-executable program, and the processor-executable program is used to implement the above method when executed by the processor .

It can be understood that all or some of the steps and systems in the methods disclosed above can be implemented as software, firmware, hardware and an appropriate combination thereof. Some or all of the physical components may be implemented as software executed by a processor, such as a central processing unit, digital signal processor, or microprocessor, or as hardware, or as an integrated circuit, such as an application-specific integrated circuit . Such software may be distributed on computer readable media, which may include computer storage media (or non-transitory media) and communication media (or transitory media). As known to those of ordinary skill in the art, the term computer storage media includes both volatile and nonvolatile media implemented in any method or technology for storage of information, such as computer readable instructions, data structures, program modules, or other data. permanent, removable and non-removable media. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disk (DVD) or other optical disk storage, magnetic cartridges, tape, magnetic disk storage or other magnetic storage devices, or can Any other medium used to store desired information and which can be accessed by a computer. In addition, as is well known to those of ordinary skill in the art, communication media typically embodies computer readable instructions, data structures, program modules, or other data in a modulated data signal such as a carrier wave or other transport mechanism, and may include any information delivery media .

Referring to FIG. 1 , an embodiment of the present invention provides a data processing system based on two-factor protection, including a client and a server, the client and the server are connected in communication, wherein,

The client is configured to implement the method described in Figure 2;

The server is configured to implement the method described in FIG. 4 .

The above-mentioned data processing method based on two-factor protection will be described below with a specific embodiment. Referring to Figure 7, the specific data processing process is as follows:

Step 1: The client uses a hash algorithm to generate a Hash value using the request protocol package as a parameter;

Step 2: The client sorts the request parameters this time according to the order of ASCII codes to generate a parameter string;

Step 3: The client uses the encryption function MD5 (parameter string + Hash value) to generate an encrypted digest sign;

Step 4: Before initiating the request, the client puts dynamic verification factors such as Hash value and sign into the header of the request parameters, and initiates a request to the server;

Step 5: After the server receives the request from the client, it takes out the dynamic verification factors of the request header one by one; firstly, it judges the Hash value, and the server queries the obtained Hash value in the Redis cache. If the result is found, it means that the request is valid, and the encrypted digest verification needs to be performed again. If the result is found, it means that the request is a replay attack and the request is invalid;

Step 6: The server sorts the received request parameters according to the order of ASCII codes. For example, if the request parameter is c=3&b=2&a=1, the sorted parameter string is a=1&b=2&c=3;

Step 7: The server uses an encryption function to generate an encrypted digest sign_server: sign_server=MD5('a=1&b=2&c=3'+Hash value), and compares the server's encrypted digest sign_server with the client's encrypted digest sign, if they are consistent , it means that the request is valid, the anti-replay check passes, and the server can perform business processing. If it is inconsistent, it means that the request has been tampered with and the request is invalid;

Step 8: After the anti-replay check is passed, the server stores the Hash value in the Redis cache.

The embodiment of the present invention has the following beneficial effects: 1. The interface security method defense mechanism based on two-factor protection can effectively defend against various types of Web application layer attacks such as anti-replay attacks, information tampering attacks, and man-in-the-middle attacks, and effectively guarantee the stability of the system 2. Reduce the overhead of server database storage space, only need to access the memory of the server without accessing the database of the server, effectively improving the efficiency of verification; using hash algorithm, encrypted summary and other verification methods, suitable for network security Most communication scenarios in the technical field have greatly improved the system's anti-replay defense capabilities.

The above is a specific description of the preferred implementation of the present invention, but the invention is not limited to the described embodiments, and those skilled in the art can also make various equivalent deformations or replacements without violating the spirit of the present invention. , these equivalent modifications or replacements are all within the scope defined by the claims of the present application.

Claims (10)

1. A data processing method based on two-factor protection, characterized in that it is applied to the client, including: According to the preset algorithm, the request protocol packet is used as the request parameter to generate the check value; Sorting the request parameters according to preset rules to generate a parameter string; Generating an encrypted summary of the parameter character string and the check value according to an encryption function, and generating a dynamic check factor according to the check value and the encrypted summary; the encryption function is an irreversible encryption function; Generate request information according to the dynamic check factor, and send the request information to the server, so that the server can verify the request information according to the check value and the encryption digest, and determine the Whether the request information is a replay attack; wherein, when the request is successful, the check value is saved in the cache. 2. The method according to claim 1, characterized in that, the request protocol packet is used as a request parameter to generate a check value according to a preset algorithm, specifically comprising: According to the hash algorithm, the request protocol packet will be used as the request parameter to generate the Hash value. 3. The method according to claim 1, wherein the request parameters are sorted according to preset rules, specifically comprising: Sort the request parameters in alphabetical order or ASCII code order. 4. A data processing method based on two-factor protection, characterized in that it is applied to the server, including: receiving the request information sent by the client, and determining a dynamic verification factor according to the request information; the dynamic verification factor includes a verification value and an encryption summary; Query whether the check value exists in the cache; If the check value exists in the cache, the request information is a replay attack; If the check value does not exist in the cache, verify the encrypted digest, and determine whether the request information is a replay attack according to a verification result. 5. The method according to claim 4, wherein the verifying the encrypted digest, and determining whether the request information is a replay attack according to the verification result, specifically includes: Determine a parameter string and a check value according to the request information, and generate a verification summary for the parameter string and the check value according to an encryption algorithm; comparing the verification digest with the encryption digest; If the verification digest is consistent with the encryption digest, the request information is not a replay attack; If the verification digest is inconsistent with the encryption digest, the request information is a replay attack. 6. A data processing system based on two-factor protection, characterized in that it is applied to the client, including: The first module is used to use the request protocol packet as a request parameter to generate a check value according to a preset algorithm; The second module is configured to sort the request parameters according to preset rules to generate a parameter string; The third module is used to generate an encrypted summary of the parameter string and the check value according to an encryption function, and generate a dynamic check factor according to the check value and the encrypted summary; the encryption function is an irreversible encryption function; A fourth module, configured to generate request information according to the dynamic check factor, and send the request information to the server, so that the server can process the request information according to the check value and the encrypted digest Perform verification to determine whether the request information is a replay attack; wherein, when the request is successful, save the check value in the cache. 7. A data processing system based on two-factor protection, characterized in that it is applied to the server, including: The fifth module is used to receive the request information sent by the client, and determine the dynamic verification factor according to the request information; the dynamic verification factor includes a verification value and an encryption summary; The sixth module is used to query whether the check value exists in the cache; The seventh module is used to determine that the request information is a replay attack if the check value exists in the cache; An eighth module, configured to verify the encryption digest if the check value does not exist in the cache, and determine whether the request information is a replay attack according to the verification result. 8. A data processing device based on two-factor protection, characterized in that it comprises: at least one processor; at least one memory for storing at least one program; When the at least one program is executed by the at least one processor, the at least one processor is made to implement the method according to any one of claims 1-3 or 4-5. 9. A computer-readable storage medium, in which a processor-executable program is stored, wherein the processor-executable program is used to execute claims 1-3 or 4- when executed by a processor. The method described in any one of 5. 10. A data processing system based on two-factor protection, characterized in that it includes a client and a server, the client and the server are connected in communication, wherein, The client is configured to implement the method according to any one of claims 1-3; The server is configured to implement the method according to any one of claims 4-5.

Images