Secure data transmission method and device of middleware based on hybrid cipher suite

Abstract

The invention discloses a secure data transmission method and device of middleware based on a hybrid cipher suite. The secure data transmission method is used by a client to obtain necessary data from a server securely. According to the secure data transmission method provided by the invention, the hybrid cipher suite is adopted during the secure data transmission between the middleware and the client, and the hybrid cipher suite comprises a national commercial asymmetric cryptography algorithm, a digest algorithm and a foreign standard symmetric cryptography algorithm. The secure data transmission between the middleware and the client comprises the following steps: firstly, in a secure connection establishment process of the middleware and the client, generating a symmetric key by using the hybrid cipher suite, and establishing a secure connection by the middleware and the client by comparing the digest values of both parties; and finally, encrypting the data necessary for the client by the middleware on the basis of the secure connection established by the both parties to obtain encrypted data, sending the encrypted data to the client, and decrypting the encrypted data by the client by using a negotiated key to obtain the necessary data.

Description

technical field [0001] The invention relates to the fields of application server middleware and information security, in particular to a data security transmission method and device based on a mixed cipher suite middleware. Background technique [0002] Today, the client can get data from the server on demand. In order to improve the security of data transmission between the client and the server, data can be safely transmitted between the client and the server through middleware (application server middleware). [0003] Middleware is a basic software platform located under the application software and above the network, operating system, and database. It provides services such as name, transaction, security, message, and data access for the application, and provides a development, deployment, operation, and management support environment for the application. , the data is transmitted between the client and the server, and the middleware acts as a transfer station to ensure...

AI Technical Summary

Problems solved by technology

At present, the cipher suites used by the client to establish a secure connection with the middleware all use foreign standard cipher algorithms, and the key length of foreign standard cipher algorithms determines the security strength of foreign standard cipher algorithms. Export restrictions lead to uncontrollable security strength of foreign standard cryptographic algorithms

In addition, some foreign standard cryptographic algorithms have security backdoors, resulting in uncontrollable data transmission security

Images