Patent ID: 8701160

Claim:
A network security HTTP negotiation method, comprising the following steps: A, a server receiving an HTTP request message with a header field sent by a terminal, wherein the header field indicates security mechanism(s) supported by the terminal, or the security mechanism(s) supported by the terminal and indication parameter(s) which show that the terminal has been in an accessing safety state; B, the server parsing the HTTP request message, and sending a response message with negotiated security mechanism(s) supported by the server and priority parameter(s) thereof to the terminal according to the result of the parsing if the header field of the request message indicates the security mechanism(s) supported by the terminal, wherein if the server is suitable for a plurality of security mechanisms at the same time, the priority parameters of the security mechanisms are required to be added into the response message; and C, the server receiving another HTTP request message sent by the terminal again to authenticate a security mechanism selected by the terminal, wherein the header field of the request message indicates the security mechanism selected by the terminal according to the response message and the priority parameter(s) of the security mechanism(s); wherein the step of authenticating the security mechanism selected by the terminal in the step C comprises: parsing the another HTTP request message sent by the terminal again, and authenticating whether the security mechanisms indicated in the header field of the request message is within the security mechanism(s) provided by the server via the response message to be selected by the terminal so as to confirm that the negotiated security mechanism(s) in the step B are not modified.