改进密钥交换算法的WTLS协议扩展分析

Improved key exchange protocol extension analysis WTLS

针对人们对无线通信网络的功能和安全越来越高的要求,提出基于EC_DH交换密钥和基于RSA交换密钥的扩展WTLS(Wireless Transport Layer Security)协议。首先分析WAP安全架构中WTLS的安全性问题,然后根据数据的机密性、完整性以及在移动电话和其它无线终端中完成授权鉴定,在此基础上针对漏洞提出解决方案,改进后的协议增加了一个颁发证书的过程。最后通过案例证明本协议的安全性。结果表明,WTLS协议是一个更高安全性的协议,在无线通信网络中有着重要的价值和研究意义。

For people on the wireless communication network functionality and security of increasmg demands this paper puts forward based EC_DH exchange keys and RSA key exchange based on the expansion of WTLS （ Wireless Transport Layer Security） protocol. First it analyses WAP WTLS security issues of security architecture, according to data confidentiality, integrity, and on mobile phones and other wireless terminals to complete the authorization identification, on this basis, propose solutions to address vulnerabilities, improved protocol increases a certificate of the process. Finally, the case demonstrates the safety of this Agreement. The results showed that, WTLS protocol is a higher security protocol, the wireless communication network has an important value and significance.