Patent ID: 8719915
Filing Date: 2014-05-06
Classification: G06F,H04L

Abstract:
1. A method for improving network application security, wherein the method comprising: a proxy server in a customer terminal host receiving a protocol message generated and sent by customer terminal software according to information input by a user, parsing the protocol message according to a predetermined protocol, and obtaining protocol content, wherein the proxy server is software installed in the customer terminal host; and the proxy server determining whether critical information, which is predetermined by the proxy server, a smart key device and an application server, is included in the protocol content; upon determining that the critical information is not included in the protocol content, the proxy server sending the protocol message to the application server, wherein the step of the proxy server determining whether critical information, which is predetermined by the proxy server, the smart key device and the application server, is included in the protocol content, comprises: the proxy server finding the field predefined by the proxy server, the smart key device and the application server, in the protocol content, determining whether there is data in the field, upon determining that there is, determining that the critical information is included in the protocol content; or the proxy server determining whether a critical information identification, predetermined by the proxy server, the smart key device and the application server, is included in the protocol content, upon determining that it is, the proxy server determining that the critical information is included in the protocol content, wherein both the protocol message and the new protocol message comprise a requirement head field, in which the address of the application server is recorded, wherein the step of the proxy server sending the protocol content to the smart key device further comprises: the proxy server parsing the requirement head field of the protocol message and determining whether the address of the application server in the requirement head field matches with an address of the application server stored in the proxy server, upon determining that it does, the proxy server sending the protocol content to the smart key device; upon determining that it does not, the proxy server prompting the user of an error in the application server, and the procedure being completed.