Ssl Protocol-based Web Security Network System Design And Implementation

Nowadays, the security of network gets lots of attention with the developing of the computer network, especially the interntet. TCP/IP protocols are not capable to solve the security problems which the internet is based on.. So a number of solutions have been come out. data security transport system is very important to maintain the security of application during the network environment, it is also effects the improvement of the internet. SSL(security socket layer) security system is the most widely used all around the internet.This article is through practical work on cryptography, information security and understanding of the SSL protocol and study design based on a solution to the above-mentioned problem of network security systems. Mainly based on the SSL protocol to design a network security system, using CA certificate of identification technology, the introduction of the core security module implementation selection mechanism, according to the need to protect the information security level and the project budget, you can choose to use feature-rich OpenSSL open-source code base, or selection of information security equipment vendors to provide network security devices achieve security module, in the public network dedicated channel set up encryption communication channel, the channel implementation in unsafe safe transmission of data, thus ensuring that sensitive information transmitted on the network when the confidentiality and integrity sexual.This article contained two parts. The first one is analysis the SSL security system particularly, which based on the confidentiality, data's completeness and ID authentication. SSL handshake system is the most important and it supplies the effective tactics which can deal with the attack to SSP all around the internet. The second part illustrate the design proposal, skill characteristic and implementations of SSL data transmit system under Windows environment. This plan not only depend on the SSL security system but also used opneSSL software package and VC++ development tool. At the end of subject we also describe the intention and expectation.