The Security Of SSL Protocol And Its Application In Campus Ecard System

With the digitization of information and the maturation of IC card technology, Campus Ecard appears, as an important part of "Digital Campus". While Campus Ecard System is developing rapidly at home and abroad, there is a contradiction between its cost and safety. Meanwhile, it is an issue requiring urgent solution in the popularizing process of the Campus Ecard System. It's a good project to solve the contradiction that we use an existing campus network as transmission network and use a safety transport protocol to protect the security of data transmission. Therefore, it is a very meaningful work to research on the feasibility and the practicability of the project.First of all, this paper introduces some knowledge and concepts of cryptography, including symmetric and asymmetric encryption technology, as well as some technologies using in authentication -- Hash functions, digital signature technology and digital certificate. Then the paper studies the SSL protocol: By researching on SSL Record Protocol, SSL Handshake Protocol, SSL Change Cipher Spec Protocol and SSL Alert Protocol, the paper analyses the security of SSL protocol and summarizes the advantages of SSL protocol in security. Furthermore, the paper expounds the reason we choose SSL protocol in the system by comparing SSL protocol with IPSec protocol and SET protocol.Based on the SSL protocol, the paper put forward a project focusing on the secure transmission of data and designs each of the modules which are used to ensure the safety of transmission. Then the paper analyses the structure of Campus Ecard System and uses these modules designed to design and implement a client and a server, while are used to make sure the security of data transmission in Campus Ecard System. After that, the system is tested in an environment which is simulated by OpenSSL -- a free package of software. Finally, the paper points out the shortages of the system and further works to be perfected.