基于数字签名和属性证书的TLS协议改进方法  

AMELIORATION ON TLS PROTOCOL BASED ON DIGITAL SIGNATURE AND ATTRIBUTE CERTIFICATE

作　　者：王魁[1] 李立新[1] 户家富[1] 余文涛[1] 

机构地区：[1]中国人民解放军信息工程大学密码工程学院,河南郑州450004

出　　处：《计算机应用与软件》2015年第4期314-316,329,共4页Computer Applications and Software

基　　金：国家保密局科研项目(BMKY2012B04-1)

摘　　要：分析TLS(transport layer security)协议的安全性和性能问题。针对TLS协议在抗抵赖性和访问控制方面的缺陷,按照TLS协议扩展标准,对协议的消息流程进行扩展。在协议内部增加数字签名和属性证书机制,提高协议的安全性,并对扩展后的协议进行性能上的优化。最后通过实验证明改进后的协议比原协议更加安全高效。After analysing the problems of security and performance in TLS protocol,we extend the message process of the protocol in accordance with the extension standard of TLS protocol in light of the deficiencies of it in non-repudiation and access control.We insert the digital signature and attribute certificate mechanism into the protocol and thus enhance the security of it.Moreover,we also optimise the performance of the extended protocol.At last it is proved through experiment that the improved protocol is more secure and efficient than the original one.

关 键 词：TLS 数字签名 属性证书 改进 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]