Research On The Application Of Information Security Technology In WebSocket Real-time Communication

With the rapid development of web technology, especially the communication technology, which are getting more sophisticated, The real-time communication technology widely use in the field of stock prices, news reports, ticket query and traffic conditions. But the present implement of real-time web application is based on HTTP protocol, arounded the polling and other server push technology. In summary, it produced a large number of additional header data inevitably, which resulting in intransmittion delay. The WebSocket protocol in HTML5 is a new theory based on the full duplex communication between the browser and the server. Only the first handshake information is more complex. Then the data transmission phase of whole duplex is entered after getting the handshake successfully, so the data flow and transmission delay are reduced. While the WebSocket real-time communication becaming more and more maturing, it also has to pay attention to the possible security risks, and the security of communication system is related to the network quality of communication enterprise directly.In this paper, we discuss the technology and theory of real-time communication, such as polling, polling, Comet, Ajax, and their advantages and disadvantages. After that, we put forward a new solution based on WebSocket, which make the complexity of data communication simplified, and the utilization of system resources improved, and the delay and transmission delay reduced greatly. Then it summarizes the security problems that may be encountered in Web real-time communication. And it aimed at the security threats and security risks caused by WebSocket handshake and transmission, so a new secure communication scheme is proposed, including the design and implementation of WebSocket protocol based on Web platform, and the design and implementation of data encryption and authentication, data encryption and transmission. Finally, in order to validate the proposed scheme, we contrast websocket and HTTP request and response data header network. It is proved that the websocket scheme's advantage and delay reduction in real time communication. At the same time, it also shows that the scheme has low delay and its feasibility. it meet the requirements of real-time and security of communication system.