The Security Of Information Transmission Based On Security Channel

A number of the digital applications, such as E-business, OA, etc, are growing up in the global range along with rapid progress of Internet. The mode of life is also changing very profound. However, the status of the network security is becoming worse at the same time. Furthermore, the security problems restrict the farther development of the Internet.The Web is actually a giant client-server system in the Internet. Almost all the network application in the Internet present itself as the form of Web. Security of the information transmission is a key issue among others, since Internet is an open network. This thesis reflects my researches on this topic.According to some kinds of existed attacking methods that are aimed at the Web system, we propose a new scheme, which transmits the information through the security channel. The scheme is described in detail in the thesis. In order to ensure the secret and integrity of transmission, we synthetically use some security technologies, including X.509 certificate, the key exchange protocol, encryption and message digest. The security channel is built on the application layer. It can provide different services according to different request. The whole system is implemented with Java, so it can offer the true cross-platform systems solutions. Not only it can be easily incorporated into the exited Web system, but also it can easily maintain in the future. This programming style is the trend of developing Web system.The analytical results indicate that the security channel has the compact structure and the best security. It can resist exited diversified security attacks. Since Advanced Encryption Standard is adopted, the security channel has a very good security. This mechanism will be effective in a long time.With the security channel, the problem of information transmission in the Web System can be well resolved; thus the network application will develop more quickly than today. In short, we propose a new scheme for resolving the problem of security. This scheme can be put into practice and it has a broad prospect.