基于数字签名和属性证书的TLS协议改进方法

摘要

After analysing the problems of security and performance in TLS protocol,we extend the message process of the protocol in accordance with the extension standard of TLS protocol in light of the deficiencies of it in non-repudiation and access control.We insert the digital signature and attribute certificate mechanism into the protocol and thus enhance the security of it.Moreover,we also optimise the performance of the extended protocol.At last it is proved through experiment that the improved protocol is more secure and efficient than the original one.%分析TLS（transport layer security）协议的安全性和性能问题。针对TLS 协议在抗抵赖性和访问控制方面的缺陷，按照TLS协议扩展标准，对协议的消息流程进行扩展。在协议内部增加数字签名和属性证书机制，提高协议的安全性，并对扩展后的协议进行性能上的优化。最后通过实验证明改进后的协议比原协议更加安全高效。