基于SSL的远程医疗系统安全性设计与实现

Design and Implement of Tele-medicine Security System Based on SSL

随着多媒体及计算机网络技术的高速发展,基于Internet的远程医疗系统面临着严重的网络安全问题。目前,国外著名的商用浏览器和Web服务器都内嵌支持SSL(Secure Socket Layer,安全套接字层)协议,但其核心密码算法都有出口限制,并且协议源代码不公开,根本无法满足我国远程医疗网实际应用的安全需求。本文着重分析了SSL握手协议及SSL协议各部分的安全性和抗攻击能力,详细介绍了一个基于JAVA的SSL安全远程医疗系统的设计方案、技术特点与实现方法,测试结果能够满足需要。

With the development of multimedia and computer network,telemedicine system is confronted with serious network security.Presently,many of the famous commercial products of browsers and web servers support SSL（Secure Socket Layer） protocol internally.SSL has become the most prevailing WWW secure protocol.However,most of the electronic business secure protocols are subject to the limitation of export regulations,and its source code isn＇t published.This paper analyzes SSL handshake protocol and describes the security of SSL in detail.Then,we propose the system design plan,critical technology and implement method of a secure web system based on JAVA In the end,the system was tested and it can satisfy the actual demand.