TLS handshake protocol for identity-based cryptosystem

Abstract

The invention discloses a TLS handshake protocol for an identity-based cryptosystem, and in particular relates to the field of basic communication of trusted security networks. The problems of high delay, high calculation amount and the like due to finding, transferring, verifying and the like of a certificate in a TLS handshake process in the traditional PKI system can be solved by defining a new ciphersuite; and the handshake protocol performance is improved while the security is ensured. The handshake protocol comprises the following steps of: (1), establishing the identity-based cryptosystem, and distributing secret keys; and (2), handshaking to negotiate a security parameter. The TLS handshake protocol disclosed by the invention has the advantages that: the certificate is unnecessary to send and verify, such that the network flow and the memory are saved; authentication and secret key negotiation are completed simultaneously; the number of messages is reduced; the network delay is reduced while the high security is ensured; and the TLS handshake protocol is perfectly compatible with a TLS by newly increasing a selective ciphersuite and an expansion option.

Description

technical field [0001] The invention relates to the basic communication field of trusted and secure networks, in particular to a TLS handshake protocol based on an identity password system. Background technique [0002] The Transport Layer Security (TLS) protocol is located between the transport layer and the application layer. It is developed on the basis of the Secure Socket Layer (Secure Socket Layer, SSL) protocol and provides authentication, confidentiality and integrity for information transmission. and other security services; [0003] The handshake protocol is the core part of TLS. It completes the functions of cryptographic algorithm negotiation, authentication and session key generation between the client and the server. The certificate issued by the public key infrastructure (PKI) implements authentication and key exchange. On the one hand, certificate query and certificate path construction lead to large computing overhead and time delay. On the other hand, cert...

AI Technical Summary

Problems solved by technology

[0012] In view of the above situation, in order to overcome the defects of the existing technology, the purpose of the present invention is to provide a TLS handshake protocol and deployment method based on the identity cryptography system, which can effectively solve the problem of certificate lookup, Problems such as high delay and large amount of calculation caused by transmission, verification, etc., while ensuring security, improve the performance of the handshake protocol

Images