Patent ID: 8504820

Claim:
A method for improving network application security, comprising: generating, by a client terminal application of a client terminal computer, a protocol message according to information input by a user and disassembling the protocol message to a plurality of IP packets; receiving and caching, by a network filter driver of the client terminal computer, the plurality of IP packets and assembling the plurality of IP packets to obtain the protocol message; analyzing, by the network filter driver, the protocol message according to a predetermined protocol, to determine whether critical information predetermined by the network filter driver, a smart key device and an application server is in the protocol message; if the critical information is in the protocol message, sending, by the network filter driver, the protocol message to the smart key device; and analyzing, by the smart key device, the protocol message to obtain the critical message and outputting the critical message to the user for confirmation; if the user confirms that the critical message is correct, signing, by the smart key device, the protocol message and returning signature data to the network filter driver, generating, by the network filter driver, a new protocol message according to the signature data and the protocol message, and disassembling the new protocol message to a plurality of IP packets and sending the plurality of IP packets to the application server via network card driver; if the user confirms that the critical information is not correct or no confirmation information is received from the user within a predetermined time period, performing an exceptional operation by the smart key device; if the critical information is not in the protocol message, sending, by the network filter driver, the cached plurality of IP packets to the application server via the network filter driver, wherein the step of signing, by the smart key device, the protocol message comprises authenticating, by the smart key device, a user according to PIN code or biometrics, wherein the biometrics include fingerprint, iris, or vein feature; if the user is legal, signing the protocol message; if the user is illegal, refusing to sign the protocol message and ending the process.