Message sending and receiving method, device and system

Abstract

The invention provides a message sending and receiving method, device and system. The message sending method comprises the following steps of: sending a client handshaking message to a server, wherein the client handshaking message carries identification of a server certificate cached by the client; receiving a server handshaking message sent by the server, wherein when the server determines the identification of the server certificate cached by the client comprises identification of a certificate to be used by the server, the server handshaking message carries the identification of the certificate to be used by the server; and encrypting a client secrete key exchange message to be sent through a searched public key in the server certificate, and sending the encrypted client secrete key exchange message to the server. With the adoption of the message sending and receiving method, device and system provided by the invention, the data amount in a TLS (Transport Layer Security) handshaking process can be reduced; the time of occupying the TLS handshaking process is shortened; and the speed of TLS connection can be further improved.

Description

technical field [0001] The present invention relates to communication technology, in particular to a message sending and receiving method, device and system. Background technique [0002] The Transport Layer Security (TLS for short) protocol is a widely used identity authentication and secure transmission protocol. [0003] In TLS, the security of authentication depends on the security of the server's private key and the security of the certificate itself. It should be noted that the security of authentication is not based on the confidentiality of certificates. A certificate is an object that can be disclosed, as long as the integrity of the certificate is guaranteed. The integrity of the certificate can be guaranteed by digitally signing the certificate through the certificate authority (Certificate Authority; hereinafter referred to as: CA) center. When verifying the integrity of a server's certificate, any entity can use the CA certificate for verification. [0004] ...

AI Technical Summary

Problems solved by technology

However, due to the uncertainty of the size of the certificate message, it is usually difficult to determine the size of the buffer. For example, if the size of the buffer is determined to be 1K, the certificate message is likely to be sent multiple times, which will also cause the TLS handshake process to take up The time is relatively long, which greatly reduces the connection speed of TLS

Images