Handshake method and system based on datagram security transmission protocol

Abstract

The present invention refers to a handshake method and system based on the datagram security transmission protocol. The handshake method includes: the client sends a client greeting message to the server, and the client greeting message includes all domestic commercial ciphers supported by the client. Package list; the server receives and judges whether the client greeting message carries a stateless message authentication code: if so, uses the domestic hash algorithm to calculate a message authentication code, and compares it with the message authentication code carried in the client greeting message to obtain Authenticate the client; after authentication, send a server greeting message to the client, informing the client of the domestic commercial cipher suite it has selected; the client and the server replace the key specifications according to the selected domestic commercial cipher suite, and establish a data transmission link road. The invention can meet the independent and controllable demand for information security in my country, fully utilizes the unique advantages of the domestic encryption algorithm, is compatible with the original DTLS protocol, and is convenient for horizontal expansion.

Description

technical field [0001] The invention relates to the field of datagram security transmission protocol, and belongs to a handshake method and system based on the datagram security transmission protocol. Background technique [0002] In recent years many applications using datagram transport have emerged. These applications include real-time video conferencing, internet telephony and online gaming. These applications are delay sensitive and thus use unreliable datagram transport (UDP). However, the UDP protocol itself does not have security. The UDP protocol is an unreliable protocol that is not connection-oriented, and does not encrypt the transmitted message segments. It cannot guarantee the identity authentication of the two parties in communication, the orderly reception of messages during transmission, and no loss. and encrypted transmission. [0003] The datagram transport layer security protocol (DTLS) implements the handshake connection between the client and the ser...

AI Technical Summary

Problems solved by technology

The key agreement algorithm (such as ECDH, ECDHE, RSA, PSK), signature algorithm (such as ECDSA, RSA, PSK), symmetric encryption (such as AES), and digest algorithm (such as AEAD, SHA1, SHA256) adopted by DTLS are developed by the United States. Algorithm standards, do not support domestic commercial encryption algorithms, and cannot meet my country's independent and controllable needs for information security

Images