Effective realization method for credible OpenSSH

Abstract

The invention relates to an effective realization method for credible OpenSSH, which comprises the components of a function-enhanced parameter negotiation module and a function-enhanced session key exchange module. In the method, step 1, modifying the forming process of an identity authentication algorithm negotiation string; step 2, modifying the process of selecting the identity authentication algorithm; step 3, adding two variables at a credible client side to represent a client type and a server type respectively; step 4, adding two variables at a credible server side to represent the client type and the server type respectively; step 5, modifying a session key exchange processing module at the credible client side; and step 6, modifying a key exchange processing module at the credible server side. The method realizes a trusted channel and fully considers the system performance, the expandability and the function backwards compatibility at the same time.

Description

Technical field [0001] The invention relates to an effective method for implementing trusted OpenSSH, which belongs to the field of computer information security. Background technique [0002] The SSH (Secure Shell) protocol is a security protocol developed by the IETF's network working group to protect the data transmitted between the client and the server. The SSH protocol adopts a hierarchical structure design, including four sub-protocols: SSH transport layer sub-protocol, user authentication sub-protocol, connection sub-protocol and file transfer sub-protocol. When the client and the server communicate using the SSH protocol, the first implementation is the SSH transport layer sub-protocol, which is responsible for establishing a secure channel between the server and the client. The sub-protocol includes protocol version exchange and parameter negotiation (parameter negotiation content includes key The three processes of exchange method, identity authentication algorithm, h...

AI Technical Summary

Problems solved by technology

However, this patent only designed a trusted session key exchange protocol, and did not consider and solve problems such as security, functional compatibility, performance, and rapid deployment that will be encountered during the specific implementation process.

Images