Method and system for collecting network confidential data plaintext

Abstract

The invention relates to a method and system for collecting a network confidential data plaintext. The method comprises the steps that on the basis that a TCP connection exists between a client side and a server side, a data collecting system is introduced, two correlative SSL / TLS connections are built between the data collecting system and the client side and the server side respectively by modifying SSL / TLS hand shaking messages, and the two connections share session keys. The data collecting system with the session keys can restore the plaintext of confidential data. The two SSL / TLS connections built between the data collecting system and the client side and the server side share the session keys, therefore, response time is shortened, the SSL throughput rate is greatly improved, internal storage resources are saved, and then the maximum user connecting number is increased.

Description

technical field [0001] The present application relates to the technical field of network information security, in particular to a secure socket layer / transport layer security (Secure Socket Layer / Transport Layer Security, SSL / TLS) protocol network confidentiality data collection method and system. Background technique [0002] The SSL / TLS protocol runs on the Transmission Control Protocol (Transmission Control Protocol, TCP) protocol and under various application layer protocols. Data communication over the Internet provides security services. SSL / TLS is a layered protocol, including the bottom record layer protocol and the upper layer change encryption description protocol, alarm protocol and handshake protocol. On the record layer, the high-level data is encapsulated into records, compressed, calculated Message Authentication Codes (MAC), encrypted, and finally sent through TCP; the data received through TCP is decrypted, verified by MAC and decompressed. provided to the...

AI Technical Summary

Problems solved by technology

Since the two connections are independent, there are the following problems: After the SSL / TLS proxy server obtains the data, it needs to modify the data packet load, resulting in a long response time; because the SSL / TLS proxy server needs to decrypt the data into plain text and then encrypt it Sending ciphertext to the peer end will significantly reduce the SSL throughput rate; the SSL / TLS proxy server needs to maintain two copies of key information for each user request, which takes up more memory resources

Images