The Security Analysis Of SSL Protocol And Its Development In WWW System

With the development of computer network especially the Internet, the security of network receives more and more attention. The secure transport of data has become the emphasis of network environment and one of important factors of network development. Presently, many of the famous commercial products of browsers and web servers support SSL internally. SSL has become the most prevailing WWW secure protocol.However, most of the electronic business secure protocols are subject to the limitation of export regulations. For example, only 40 bits or 56 bits of RC4 algorithm and 512 bits of RSA algorithm are permitted to export, and its source code isn't published. It isn't satisfied with the secure requirement of the electronic business in our country. It's very significant to design or rebuild the secure transport protocol with our own cryptogram algorithm based on the research of its idea and principle.In this article, the fundamental knowledge of cryptography are introduced first. The author introduces the message digest algorithm, digital signature and X.509 certificate which are the foundations of authentication in public-key systems. Next, SSL protocol is analyzed. SSL handshake protocol and the security of SSL are described in detail. Then, the system design plan, critical technology and implement method of a secure web system based on JAVA are proposed. In the end, the author points out the work should be improved in the future.