Research And Application Of Ssl Protocol Security Based On PKI

As the electronic commerce in world wide range of application, online trading datasecurity issues have become an important part of the electronic commerce field. SocketsLayer as a security protocol is the most widely used protocol to protect secure communication.SSL uses Layered and handshake mechanism to provide security, integrity, undeniablefunction, server certificate, optional client authentication and security services for TCP/IPconnection.This article first introduces the PKI authentication technology in detail based onrecommending the PKI theory knowledge and password algorithm. Finally, it focuses on thecore technology of PKI-digital certificate.Then this article designs a WEB network system based on SSL, especially analyzes SSLhandshaking protocols deeply. This network system is proved to have digital signature,encryption and decryption, authentication, and data trans mission functions through rigoroustesting, which enable the network realize of data integrity, confidentiality, and usernon-repudiation so as to achieve a truly secure network.Finally, this article takes advantage of Public Key Infrastructure (PKI) and SSL protocolto solve the security problems of the financial information systems and expand the applicationresearch. This article takes financial room of South and North school campus as an illustration,and detailed illustrates how to solve financial information system security utilizing PKI andSSL. It designs a network topology, and puts forward the system function design. Establishingthe connection module, the log module, the daemon module, secure communications module,time stamp module, security packets module, this system can not only make data transmissionof south and north campus financial room secret, integrated and non-repudiation of operatingbehavior, but also implement trusted time stamp, secure storage of business data and trusted log service function, thereby solving data confidentiality, authentication, non-repudiation andother security problems of financial information system in the operation.