A device and method for protecting secure socket layer session keys

Abstract

The invention discloses equipment and a method for protecting a session key of a secure socket layer. By hardware equipment, key information of a protocol of the secure socket layer cannot be exposed in a software environment in a cleartext mode, and the safety of a key in communication of the protocol of the secure socket layer is improved. The equipment comprises a session management module, a random information generating module, a certification module, an encryption and decryption computing module and a key storage module. On the basis of secure socket layer protocol connection established by client sides and a server and session key facilities which are respectively arranged on the client sides and the server, the method comprises the following steps of management session implementing, random number generation, certification and generation and session key using and storing through the facilities by using the client sides and the server. The session key of the protocol of the secure socket layer is protected by the hardware equipment, the credibility of the session key is improved, and the protocol of the secure socket layer is safe and reliable.

Description

technical field [0001] The present invention relates to the technical field of communication, and further relates to a device and method for protecting a secure socket layer (Secure Sockets Layer, SSL) session key in the technical field of communication security. The invention can be used to ensure the safe use of the session key from the hardware level in the secure socket layer (Secure Sockets Layer, SSL) communication process. Background technique [0002] Emerging applications such as online banking and e-commerce based on the World Wide Web often use the SSL protocol to ensure the security of data transmitted on the network, especially HTTPs based on the SSL protocol is widely used to protect the communication security between Web servers and browsers. In addition, the SSL protocol can also be used to protect the transmission security of applications based on the TCP protocol, which greatly improves the security environment of the World Wide Web. [0003] The current s...

AI Technical Summary

Problems solved by technology

The shortcomings of the system disclosed in this patent are that there is no special processing for session management, the generation of random information is not realized by hardware, the randomness and reliability are insufficient, and the process of calculating HMacValue, MS and session key is not completed with the participation of hardware , the storage and use of the session key is not completed in the hardware, it is not protected by the hardware, and the security of the system is affected

Images