即时通信的PKI保护策略研究

Study on the PKI Protective Countermeasures of Instant Messaging

对IM的主要安全威胁进行分析,提出采用SSL对通信连接进行保护;用PKI对配置信息进行加密存储,对传输的数据进行签名,加密以及解密,验证签名等安全处理;引入签名验证机制和CAPTCHA验证机制来防范可能的蠕虫病毒攻击。通过一系列的安全保护策略,对IM实行一种全方位的保护。

Analyze the main security threat the Instant Messaging, put forward adopting Secure Socket Layer to protect secure connection. Apply the Public Key Infrastructure mechanism to protect the configuration information; use methods such as encryption, decryption, signature and verification of signature to secure the data exchange. Take precautions against the attack from worms virus by means of mechanism of digital signature and CAPTCHA validation. Practice the all - directions protection to the IM through a set of secure protection strategy.