基于身份公钥体制的新型SSL协议设计与实现

摘要

Secure Socket Layer protocol has been widely used in network security.The majority of current SSL protocols is based on certificate.New non-certificate cryptosystems represented by Identity-based cryptosystem can reduce the computation overhead and network load while ensuring high security,and avoiding the management of certificates.A new SSL protocol based on identity-based cryptosystem is proposed,and it is implemented using OpenSSL library and PBC library.The analysis of the communication shows that the proposed identity-based cryptosystem can establish a secure SSL connection without the certificate operation.%安全套接层(Secure Socket layer,SSL)协议是当前广泛使用的安全连接协议,现有SSL协议中的公钥密码大部分是基于证书服务来实现.基于身份加密为代表的新型非证书公钥体制可以在保证较高安全性的前提下,尽可能降低计算开销和网络负载,并避免对证书的管理.本文提出一种基于身份公钥体制的新型SSL协议IBE-SSL,并使用开源的OpenSSL库和PBC库对其进行实现,通信过程数据包捕获分析结果表明,所提的IBE-SSL协议在取消证书操作的基础上依然可以建立安全的SSL连接.