Controllable end secure communication method and system based on tls simplified protocol

Abstract

The invention discloses a controllable end secure communication method and system based on a tls simplified protocol, and belongs to the technical field of secure communication. In a controllable end secure communication scene, an identification field is newly added in the tls protocol, and a cipher suite and a certificate signature algorithm during mutual communication session are agreed through the newly added identification field. According to the method and the device, the use of a cryptographic or self-defined password suite and a signature algorithm is supported through the newly added field and the related agreement of the tls protocol, the application can be obtained in various scenes by matching the cryptographic algorithm, the safety autonomous controllable capability is improved, and the safety of the user is improved through the newly added field and the related agreement of the tls protocol. According to the method, two communication parties are supported to directly agree on the cipher suite and the signature algorithm, the phenomenon of repeated negotiation when the cipher suite fails to match is avoided, the TLS negotiation process can be simplified, meanwhile, the method is still compatible with a standard tls protocol, and when a communication opposite end is uncontrollable and cannot use a newly-added field, execution is still carried out according to a tls standard process, so that the communication compatibility is ensured.

Description

Technical Field

[0001] The present invention belongs to the technical field of secure communications, and in particular relates to a controllable end secure communication method and system based on a simplified TLS protocol. Background Art

[0002] In order to efficiently and securely implement communication between two mutually untrusted endpoints in an insecure Internet environment, the TLS communication protocol is often used to negotiate the session keys of the two communicating parties and complete encrypted communication. The characteristics of TLS1.3 enable it to take into account both security and efficiency in the process of negotiating keys between the two communicating parties. However, there will be some problems with security control and negotiation efficiency in the controllable end secure communication scenario.

[0003] For example, the consortium chain in the blockchain field is a controllable end-to-end secure communication scenario, which has the following characteristics in terms of communication:

[0004] The nodes of each organization participating in the alliance are actually trustworthy and controllable. The nodes of each organization participating in the alliance need to achieve secure communication in an insecure Internet environment. They need to be secure, autonomous and controllable. They need to support non-international standard national encryption algorithms, such as the SM series algorithms, and even some custom cryptographic algorithms (such as the ECDSA extended algorithm with built-in low-s processing). They must be compatible with international standards. While supporting national encryption or custom cryptographic algorithms, they must also be compatible with tls1.3, a protocol that does not support national encryption. In business scenarios with the above characteristics, the current best practice for communication protocols is still tls1.3 (taking into account both security and efficiency), but the use of the tls1.3 communication protocol will also have the following two shortcomings:

[0005] 1. The ability to control security is insufficient. The list of cipher suites and signature algorithms supported by TLS 1.3 is fixed, which makes it impossible to specify the communication cipher suite (such as the national secret cipher suite or a custom cipher suite) and the signature algorithm used by the certificate (such as the national secret signature algorithm or a custom signature algorithm) on demand.

[0006] 2. There are redundant functions in the negotiation process. When the client sends Client Hello for the first time, tls1.3 carries the key negotiation materials generated based on the client's most preferred cipher suite, in order to reduce the number of negotiation rounds. However, in the scenarios considered by tls1.3, the communication peer is uncontrollable, and the priority of the cipher suite support list of the communication peer may be different from that of the server. In this way, the server may fail to match the client's cipher suite (the matched cipher suite is not the cipher suite used by the client's key negotiation materials). At this time, tls1.3 will require the client to regenerate the key negotiation materials and resend the Client Hello. This set of cipher suite matching processing logic is undoubtedly redundant for scenarios where the communication end is controllable;

[0007] The invention patent with the Chinese patent announcement number CN103118027B discloses a method for establishing a TLS secure channel based on the national secret algorithm. The method includes the steps of: the server initiates a request, the client responds to a hello message, or the client initiates a hello message; the server responds to a server hello message; the server sends a server SM2 certificate to the client, and then sends a hello completion message; after the client receives the hello completion message, it sends a key exchange message; the client sends a password suite change message and an end message, and after the server receives the client end message, it sends a password suite change message and an end message; after both parties receive the other party's end message and pass the verification, they transmit data securely with the agreed security parameters. The present invention integrates the national secret algorithm into the TLS protocol for secure communication, and realizes a data security method with a shorter key length that is significantly better than the RSA algorithm in terms of signature speed and equivalent to the 2048-bit security level of the RSA algorithm. The scheme uses SM2 as a key negotiation algorithm to establish a TLS secure channel, but multiple interactions are still required in the handshake stage. When the two communicating parties negotiate the password suite, it is still possible that the negotiation fails and the negotiation information is resent. There is a negotiation redundancy problem, so there is room for improvement. Summary of the invention

[0008] The purpose of the present invention is to propose a controllable end secure communication method and system based on the TLS simplified protocol in order to solve the problem that the matching processing logic of the secure communication protocol in a controllable scenario is complicated, the negotiation process has redundant functions, and the communication efficiency is affected.

[0009] In order to achieve the above object, the present invention adopts the following technical solutions:

[0010] A controllable end secure communication method based on a simplified TLS protocol, comprising:

[0011] In a controllable end secure communication scenario, a new identification field is added to the TLS protocol, and the cipher suite and certificate signature algorithm during the communication session are agreed upon through the new identification field.

[0012] As a further description of the above technical solution:

[0013] The step of adding an identification field to agree on a cipher suite is: when a controllable client communicating via tls prepares Client Hello data to initiate secure communication;

[0014] When the controllable client and the server agree on a cipher suite in advance, the preset cipher suite support list is cleared, the cipher suite agreed on in advance with the server is specified by adding a new identification field CipherSuiteAgreed, and key negotiation materials are generated based on the cipher suite;

[0015] When the server receives Client Hello, it first determines whether CipherSuiteAgreed is empty; if CipherSuiteAgreed is not empty, it is directly used as the cipher suite for this session.

[0016] As a further description of the above technical solution:

[0017] It also includes that when CipherSuiteAgreed is empty, the original cipher suite matching process is still performed.

[0018] As a further description of the above technical solution:

[0019] The step of adding a new identification field to agree on the certificate signature algorithm is as follows: when the controllable client of TLS communication prepares Client Hello data to start secure communication, when the controllable client and the server agree on the certificate signature algorithm in advance, the preset signature algorithm support list is cleared, and the signature algorithm agreed on in advance with the server is specified by adding a new identification field SignAlgAgreed;

[0020] When the server receives Client Hello, it first determines whether SignAlgAgreed is empty; if SignAlgAgreed is not empty, it directly uses it as the certificate signing algorithm for this session and obtains the certificate of the corresponding algorithm.

[0021] As a further description of the above technical solution:

[0022] It also includes that when SignAlgAgreed is empty, the preset signature algorithm matching process is still executed.

[0023] As a further description of the above technical solution:

[0024] The controllable end secure communication scenario is that both communicating parties are endpoints that trust each other.

[0025] As a further description of the above technical solution:

[0026] A controllable end secure communication system based on a simplified TLS protocol, comprising:

[0027] The client and server can control the secure communication, and the client and server can communicate securely through the TLS protocol;

[0028] The identification module is arranged at the client and the server, and is used for the identification module to generate a newly added identification field so as to pre-agreed on the cipher suite and certificate signature algorithm for the communication session between the two parties in a controllable segment communication scenario.

[0029] As a further description of the above technical solution:

[0030] The identification module comprises:

[0031] CipherSuiteAgreed for agreeing on cipher suites adds a new identification field submodule;

[0032] A new identification field submodule is added to SignAlgAgreed, which is used to agree on the certificate signature algorithm.

[0033] In summary, due to the adoption of the above technical solution, the beneficial effects of the present invention are:

[0034] In the present invention, through the newly added fields and related agreements of the TLS protocol, it supports the use of national secret or customized cipher suites and signature algorithms. By matching the national secret algorithm, it can be applied in a variety of scenarios, improving the security, independent and controllable capabilities. Through the newly added fields and related agreements of the TLS protocol, it supports the communicating parties to directly agree on the cipher suite and signature algorithm, avoiding the repeated negotiation phenomenon when the cipher suite matching fails, and can simplify the TLS negotiation process and improve the negotiation efficiency. At the same time, it is still compatible with the standard TLS protocol. When the communication peer is uncontrollable and the newly added fields cannot be used, it is still executed according to the TLS standard process to ensure the compatibility of communication. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Figure 1 The present invention provides a flow chart of a controllable terminal secure communication method based on the simplified TLS protocol. DETAILED DESCRIPTION

[0036] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0037] See also Figure 1 The present invention provides a technical solution: a controllable end secure communication method based on the TLS simplified protocol, comprising:

[0038] In a controllable end secure communication scenario, a new identification field is added to the TLS protocol, and the cipher suite and certificate signature algorithm during the communication session are agreed upon through the new identification field.

[0039] Among them, Cipher Suite is a combination of a series of algorithms used for encryption, authentication and data integrity protection in network communication, especially in the Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. Each cipher suite defines the specific encryption algorithm, key exchange mechanism, authentication method and message authentication code algorithm used in the communication process.

[0040] Specifically, TLS 1.3 supports five mainstream international cipher suites that are currently cryptographically secure: TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384, TLS_CHACHA20_POLY1305_SHA256, TLS_AES_128_CCM_SHA256, and TLS_AES_128_CCM_8_SHA256.

[0041] Note that different TLS implementation libraries may define different priorities;

[0042] It also supports the current cryptographically secure international mainstream certificate signature algorithms, such as ECDSAWithP256AndSHA256, ECDSAWithP384AndSHA384, ECDSAWithP521AndSHA512, etc. Different tls implementation libraries may define different priorities.

[0043] The step of adding an identification field to agree on a cipher suite is: when a controllable client communicating via tls prepares Client Hello data to initiate secure communication;

[0044] When the controllable client and the server agree on a cipher suite in advance, the preset cipher suite support list is cleared, the cipher suite agreed on in advance with the server is specified by adding a new identification field CipherSuiteAgreed, and key negotiation materials are generated based on the cipher suite;

[0045] When the server receives Client Hello, it first determines whether CipherSuiteAgreed is empty; if CipherSuiteAgreed is not empty, it is directly used as the cipher suite for this session.

[0046] It also includes that when CipherSuiteAgreed is empty, the original cipher suite matching process is still executed;

[0047] The step of adding a new identification field to agree on the certificate signature algorithm is as follows: when the controllable client of TLS communication prepares Client Hello data to start secure communication, when the controllable client and the server agree on the certificate signature algorithm in advance, the preset signature algorithm support list is cleared, and the signature algorithm agreed on in advance with the server is specified by adding a new identification field SignAlgAgreed;

[0048] When the server receives Client Hello, it first determines whether SignAlgAgreed is empty. If SignAlgAgreed is not empty, it directly uses it as the certificate signature algorithm for this session and obtains the certificate of the corresponding algorithm.

[0049] It also includes that when SignAlgAgreed is empty, the preset signature algorithm matching process is still executed;

[0050] The controllable end secure communication scenario is that both communicating parties are endpoints that trust each other.

[0051] Specifically, when the client prepares the ClientHello data, the ce-tls protocol (i.e., the controllable-end tls protocol is referred to as ce-tls) configures the CipherSuiteAgreed and SignAlgAgreed fields based on the cipher suites and signature algorithms agreed upon by both parties in advance, and supports national or custom cipher suites / signature algorithms. However, the tls1.3 protocol can only configure the cipher suite list and signature algorithm list supported by the client because it takes into account that both parties in communication cannot control each other. Note that the key negotiation materials prepared by tls1.3 in ClientHello are generated based on their own top-priority cipher suites, while ce-tls is generated based on the agreed cipher suites.

[0052] After the server receives ClientHello, tls1.3 will match the cipher suite / signature algorithm it supports based on the cipher suite list and signature algorithm list supported by the client. If the matched cipher suite is different from the cipher suite used in the key negotiation material sent by the client ClientHello, the client needs to be notified to re-initiate ClientHello. The ce-tls protocol only needs to directly use the cipher suite and signature algorithm specified by the CipherSuiteAgreed and SignAlgAgreed fields, because the key negotiation material sent is also generated based on the agreed cipher suite, that is, agreement is better than matching.

[0053] A controllable end secure communication system based on a simplified TLS protocol, comprising:

[0054] The client and server can control the secure communication, and the client and server can communicate securely through the TLS protocol;

[0055] The identification module is arranged at the client and the server, and is used for the identification module to generate a newly added identification field so as to pre-agreed on the cipher suite and certificate signature algorithm for the communication session between the two parties in a controllable segment communication scenario.

[0056] Specifically, the identification module includes:

[0057] CipherSuiteAgreed for agreeing on cipher suites adds a new identification field submodule;

[0058] A new identification field submodule is added to SignAlgAgreed, which is used to agree on the certificate signature algorithm.

[0059] In the present invention, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance; the term "plurality" refers to two or more, unless otherwise clearly defined. The terms "installed", "connected", "connected", "fixed" and the like should be understood in a broad sense. For example, "connected" can be a fixed connection, a detachable connection, or an integral connection; "connected" can be a direct connection or an indirect connection through an intermediate medium. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0060] The present invention is preferably implemented in software, but may also be implemented in hardware or a combination of hardware and software. The present invention may also be implemented as computer-readable code on a computer-readable medium. The computer-readable medium is any data storage device that can store data that can be read by a computer system. Examples of computer-readable media include read-only memory, random access memory, compact disks (CD-ROMs), digital versatile disks (DVDs), magnetic tapes, optical data storage devices, and carrier waves. The computer-readable medium may also be distributed among multiple computer systems connected via a network so that the computer-readable code is stored and executed in a distributed manner.

[0061] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can make equivalent replacements or changes according to the technical scheme and inventive concept of the present invention within the technical scope disclosed by the present invention, which should be covered by the protection scope of the present invention.

Claims

1. A controllable end secure communication method based on TLS simplified protocol, characterized in that: include: In a controllable end secure communication scenario, a new identification field is added to the TLS protocol, and the cipher suite and certificate signature algorithm during the communication session are agreed upon through the new identification field.

2. According to claim 1, a controllable end secure communication method based on the TLS simplified protocol is characterized in that: The step of adding an identification field to agree on a cipher suite is: when a controllable client communicating via tls prepares ClientHello data to initiate secure communication; When the controllable client and the server agree on a cipher suite in advance, the preset cipher suite support list is cleared, the cipher suite agreed on in advance with the server is specified by adding a new identification field CipherSuiteAgreed, and key negotiation materials are generated based on the cipher suite; When the server receives Client Hello, it first determines whether CipherSuiteAgreed is empty; if CipherSuiteAgreed is not empty, it is directly used as the cipher suite for this session.

3. According to claim 2, a controllable end secure communication method based on the TLS simplified protocol is characterized in that: It also includes that when CipherSuiteAgreed is empty, the original cipher suite matching process is still performed.

4. According to a controllable terminal secure communication method based on the TLS simplified protocol according to claim 1, it is characterized in that: The step of adding an identification field to agree on a certificate signature algorithm is as follows: when the controllable client of TLS communication prepares ClientHello data to start secure communication, when the controllable client and the server agree on a certificate signature algorithm in advance, the preset signature algorithm support list is cleared, and the signature algorithm agreed on in advance with the server is specified by adding an identification field SignAlgAgreed; When the server receives Client Hello, it first determines whether SignAlgAgreed is empty; if SignAlgAgreed is not empty, it directly uses it as the certificate signing algorithm for this session and obtains the certificate of the corresponding algorithm.

5. According to claim 4, a controllable end secure communication method based on the TLS simplified protocol is characterized in that: It also includes that when SignAlgAgreed is empty, the preset signature algorithm matching process is still executed.

6. A controllable end secure communication method based on TLS simplified protocol according to claim 1, characterized in that: The controllable end secure communication scenario is that both communicating parties are endpoints that trust each other.

7. A controllable end secure communication system based on the TLS simplified protocol, applied to a controllable end secure communication method based on the TLS simplified protocol as claimed in any one of claims 1 to 6, characterized in that: include: The client and server can control the secure communication, and the client and server can communicate securely through the TLS protocol; The identification module is arranged at the client and the server, and is used for the identification module to generate a newly added identification field so as to pre-agreed on the cipher suite and certificate signature algorithm for the communication session between the two parties in a controllable segment communication scenario.

8. A controllable end secure communication system based on the TLS simplified protocol according to claim 7, characterized in that: The identification module comprises: CipherSuiteAgreed for agreeing on cipher suites adds a new identification field submodule; A new identification field submodule is added to SignAlgAgreed, which is used to agree on the certificate signature algorithm.

Images