保护客户端/服务器连接 [英] Securing client/server connection

问题描述

大家好，

我编写了一个客户端/服务器程序.连接是基于互联网的.当客户端连接到服务器时，我需要确保他/她是授权客户端.客户端使用Windows，而服务器使用Ubuntu.该软件是C#的组合 和Java.

我能想到的最好的解决方案是要求每个客户端使用静态IP，并且在服务器上，我将Ubuntu配置为阻止除那些静态IP之外的所有IP.我宁愿不要要求客户获得静态IP，因为它涉及额外的成本，时间和精力.

是否存在不涉及第三方工具的替代解决方案?

使用简单的用户名和密码不是一个好的解决方案，因为此信息可以在授权和未授权用户之间共享.

谢谢.

解决方案

您好，FromJava2016，

谢谢您在这里发布.

对于您的问题，您可以让只有授权的计算机才能访问服务器.

您可以使用Mac Address来获取所需的内容.可以避免使用共享帐户.您可以使用Mac Address之类的帐户来避免授权和未经授权的共享.

计算机的媒体访问控制地址(MAC地址)是唯一的分配给网络接口以在网段的数据链路层进行通信的标识符. MAC地址被用作大多数IEEE 802网络技术的网络地址，包括以太网和WiFi.

根据Mac地址，y 我希望这会对您有所帮助.

温迪

Hi all,

I wrote a client/server program. Connection is an internet based. When a client connects to the server, I need to make sure that he/she is an authorized client. Clients are using Windows and the server is using Ubuntu. The software is a combination of C# and Java.

The best solution I could come up with is to require each client to use a static IP and on the server I configure Ubuntu to block all but those static IPs. I would prefer not to ask clients to obtain static IPs since it involves extra cost, time and effort.

Is there an alternative solution that doesn't involve third party tools?

Using simple user name and password is not a good solution as this information could be shared between authorized and unauthorized users.

Thank you.

解决方案

Hi FromJava2016,

Thank you for posting here.

For your question, you could make that only the authorized computer access the Server.

You could use Mac Address to get what you want.You could avoid the shared account. You could use Mac Address like account to avoid authorized and unauthorized sharing.

A media access control address (MAC address) of a computer is a unique identifier assigned to network interfaces for communications at the data link layer of a network segment. MAC addresses are used as a network address for most IEEE 802 network technologies, including Ethernet and WiFi.

When client send request to Server, the request will include Mac Address. 

According to the Mac Address, you could verify it is authorized user or not. 

I hope this would be helpful to you.

Best Regards,

Wendy

这篇关于保护客户端/服务器连接的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！