本地信任SSL代理增强Web电子交易安全  

Enhancing Web-based E-Transaction Platform's Security Using A Locally Trusted SSL Proxy

作　　者：吴迪[1] 李文印[1] 陈震[1] 

机构地区：[1]吉林大学计算机科学与技术学院,吉林长春130026

出　　处：《微电子学与计算机》2004年第10期77-81,共5页Microelectronics & Computer

摘　　要：由于标准浏览器中的内嵌SSL安全模块不受终端用户控制,并且,该SSL安全模块所能提供的最大安全性还受到国外安全产品出口限制的影响,致使单纯的基于标准浏览器的端到端SSL连接并不适合于安全性要求较高的Web电子交易场合。本文设计并实现了一种本地信任SSL代理,将原先端到端的SSL连接拆分成两个独立的SSL连接,即从浏览器到本地信任SSL代理的本地SSL连接以及从本地信任SSL代理到远端安全Web服务器的远程SSL连接。由于远程SSL连接独立于标准浏览器,并可根据用户需要选择安全性更高的加密算法和密钥长度,因而,能够有效增强现有Web电子交易平台的安全性。The lack of full control of standard browsers' embedded SSL module and the security limitations of security-related products posed by oversea exporting laws, make the pure browser-based SSL connection unsuitable for some Web-based E-Transaction scenarios where more security protection is required. This paper designed and implemented a Locally-Trusted SSL proxy (LT-SSL Proxy) aimed to address such security issues. The LT-SSL Proxy splits the previous End-to-End SSL connection into two independent parts: the local SSL connection from the browser to the LT-SSL Proxy and the remote SSL connection from the LT-SSL Proxy to the remote secure Web server. Since the remote SSL connection is free of the security limitations posed by the standard browsers and the end-user can configure more secure encryption algorithms on demand, the LT-SSL Proxy can enhance existing Web-based E-Transaction platform's security greatly.

关 键 词：WEB 安全电子交易 SSL CA X509证书 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]