The Research And Implementation Of Secure Instant Messaging Client Based On Jabber

Instant messaging has been replacing the position of E-mail as its realtime, diversification features of services and has been an important method to people to daily communicate with each other in Internet. However, its security is one of non-obviate problems that it must guarantee the messages between the users. Currently, Jabber as its open, good extension and security features will possibly be the standard of instant messaging systems. Therefore, it is significant to do research to Jabber and its implementation.By analyzing the open source, interlinkage and good extension features of Jabber and its simple, flexible XML(Extensible Markup Language) scheme, referred to the TLS(Transport Layer Security Protocol)and SASL (Simple Authentication and Secure Layer)security schemes which are frequently used by Email systems, a security architecture of instant messaging systems is proposed. It uses a parsing scheme based on Event XML and makes use of SASL for authentication and TLS for encryption. The implement is based on the distributed network architecture which is often used by Email systems. The client Side contains XML parsing module, Jabber Control module and TLS/SASL module: XML parsing is used to parse the data received from server; Jabber Control module encapsulates the message to XML packages before it is sent to server; TLS/SASL module uses TLS to encrypt both authentication used by SASL and XML data, guarantee the security of communication.By using the TLS and SASL security schemes, the security of digital certificate and the communication between the users are highly guaranteed.