应用层QoS约束SSL协议的改进

Improvement of Application Layer QoS Controlled SSL Protocol

针对安全套接字协议在握手过程中消耗大量资源并导致服务器不稳定的现象,提出并实现一个基于应用层QoS约束下的安全套接字协议技术方案。该方案使服务器对客户的响应能够按照满足服务器稳定运行的要求做出调整。对于密集请求,在客户许可的情况下适当降低密钥强度,对于稀疏请求,在不影响服务器性能的情况下适当增加密钥强度,充分利用服务器的计算资源。实验结果表明,该改进方案安全、有效、可行。

According to the fact of server＇s unstabilization caused by the mass consumption of resource due to the operation by SSL Protocol during the course of shaking hands, this paper puts forward a technical solution founded on the Quality of Service（QoS） restriction of application layer. Thus, in order to meet its requirement of stable running, the server makes ajustment in answer to the customer＇s respondence. Under the circumstances of the relatively insentive request, it appropriately reduces in the intensity of the secret key when the customer permits. It inreases intensity appropriately without affecting the servers performance and makes full use of the calculation resources of the servers. Experimental result show the method is safe, efficient and feasible.