SSL握手协议的分析及改进  

The Analysis and Improvement of SSL Handshake Protocol

作　　者：史默然[1] 韩永飞[1] 栗颖佳 

机构地区：[1]北京工业大学计算机学院,北京100124

出　　处：《电脑与信息技术》2012年第4期8-10,35,共4页Computer and Information Technology

摘　　要：文章对SSL握手协议进行深入研究,并针对协议在应用上的局限性,提出了基于PKI双证书机机制和PMI属性证书对SSL握手协议的改进方案。改进后的SSL握手协议,不但密钥协商的过程更加安全可靠,而且具备了对网络资源细粒度的访问控制功能。The paper makes in-depth study on SSL handshake protocol, and aiming at the limitations of the protocol on the application, proposes improvement on SSL handshake protocol which is based on PKI dual certificate mechanisms and PMI attribute certificate. The improved SSL handshake protocolnot only the key negotiation process more secure, reliable, but also have fine-grained access control to network resources.

关 键 词：SSL握手协议 PKI双证书 PMI属性证书 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]