A method for establishing a secure channel, its data protection method, and a method for updating the secret key of the secure channel

Abstract

The invention provides a method for establishing a safe channel, a data protection method thereof, and a method for updating a secret key of the safe channel. During the handshake process of establishing a secure communication channel between the terminal and the server, both parties check whether the secure communication channel has been successfully established and the key has not changed, and check whether the other party's certificate is cached. If the relevant data has been cached, the data and process transmitted in the handshake process between the two parties can be reduced, so as to achieve the characteristics of the packet domain communication of the mobile communication network and ensure the data security in the data communication process between the terminal and the server. Minimize the establishment time of the two parties to establish a secure communication channel, and achieve the purpose that the two parties do not have to maintain the TCP chain all the time.

Description

Technical field [0001] The invention relates to a secure channel establishment method, a data protection method and a secure channel secret key update method, in particular to a secure channel establishment method suitable for mobile communication, a data protection method and a secure channel secret key update method. Background technique [0002] A very common method for establishing a secure communication channel and data protection is to use the Secure Transport Layer Protocol (TLS), which is used to provide confidentiality and data integrity between two communication terminals based on the characteristics of a digital certificate. The TLS protocol (RFC2246 RFC4346) is between the TCP / IP protocol and various application layer protocols to provide security support for data communication. [0003] The TLS Handshake Protocol (TLS Handshake Protocol) is built on top of the TLS record protocol. It is used to initiate negotiation functions such as identity authentication, negotiation...

AI Technical Summary

Problems solved by technology

For the packet domain network of mobile communication, because the mobile terminal will often switch to different base stations, the link will be interrupted

In addition, the power of mobile terminals is generally limited. If you use the long connection method in the TCP protocol to communicate with the server, the power consumption of mobile terminals will increase sharply, which will affect the user experience.

Images