Patent ID: 8504820
Filing Date: 2013-08-06
Classification: H04L

Abstract:
1. A method for improving network application security, comprising: generating, by a client terminal application of a client terminal computer, a protocol message according to information input by a user and disassembling the protocol message to a plurality of IP packets; receiving and caching, by a network filter driver of the client terminal computer, the plurality of IP packets and assembling the plurality of IP packets to obtain the protocol message; analyzing, by the network filter driver, the protocol message according to a predetermined protocol, to determine whether critical information predetermined by the network filter driver, a smart key device and an application server is in the protocol message; if the critical information is in the protocol message, sending, by the network filter driver, the protocol message to the smart key device; and analyzing, by the smart key device, the protocol message to obtain the critical message and outputting the critical message to the user for confirmation; if the critical information is not in the protocol message, sending, by the network filter driver, the cached plurality of IP packets to the application server via the network filter driver, wherein the step of signing, by the smart key device, the protocol message comprises authenticating, by the smart key device, a user according to PIN code or biometrics, wherein the biometrics include fingerprint, iris, or vein feature; if the user is legal, signing the protocol message; if the user is illegal, refusing to sign the protocol message and ending the process.