Based On Ssl Secure Web System And Applied Research

With the wide spread influence of Internet, the security of network receives more and more attention.Presently, quite a few protocols about WWW security is proposed, such as SSL, SET, S-HTTP, etc. SSL has the longest history and consequently the deepest influence on industry. Many of the famous commercial products of browsers and web servers support SSL internally. SSL has become the most prevailing WWW secure protocol. However, because of the limitation of American export regulations, the security strength of SSL softwares that we can get is fragile, thus these softwares cannot be deployed in critical missions.In this article, we first introduced the fundamental knowledge of cryptography, including private cipher, public cipher and one-way hash function, etc. Related algorithms applied in our system are also introduced. Next, some of the most prevailing WWW secure protocols are discussed and analyzed. SSL is analyzed as a special example in detail.Then, a secure web middleware platform based on SSL is proposed. We present a design framework using Layered Service Provider (LSP) technology of Winsock2.0 on secure client and STREAMS technology on secure server. Improvement on key exchange algorithm and handshake procedure is also described. Moreover, we proposed a reassembling mechanism and algorithm, which is used to map data stream onto packets of SSL. Subsequently, implementation is introduced in detail. In the end, we made a system performance analysis and conclusion.