| The Virtual Private Network technology based on Secure Socket Layer protocol has developed rapidly in recent years for its simplicity and lower cost. By now, there are lots of products relevant SSL VPN have been used in the society but those VPN still has many limitations. Firstly, though the perfect safety access control mechanism is always considered to be the max advantage of SSL VPN, still existence some hidden troubles. Secondly, the protocol changes and safety access control realize in the application layer will direct impact to the system functions; the poor efficiency has limited the development of the SSL VPN. In this paper the author has done some research on the two questions, the following are the main theory foundation and main results of this thesis.◆Giving thorough analysis to VPN especially SSL VPN protocol system, realizes mechanism, safe mechanism and other Key technologies.◆On the foundation of thorough analysis to the SSL protocol, especially to the handshake protocol, importing one kind of enhanced SSL protocol which using ECC(the ellipse curve encrypts) to instead of RSA and at last give out the analysis to the improved design.◆In order to improve the performance of VPN, the author innovates a new on demand SSL design based on standard SSL protocol. This design can not only judge whether a connection is necessary on demand in practice but also gives a method about how to change the intensity of encryption in SSL connection immediately and supply intensity-different protection to different resources and different roles.◆Design and implement an improved SSL VPN. Designed one kind of new agency-based SSL VPN server prototype using the enhanced SSL protocol and the Implementation precept of calculating on demand and encrypted by class. |
PDF Full Text Request