System and method for realizing SSL unloading session multiplexing based on TLS1.3 protocol

Abstract

The invention relates to a system and a method for realizing SSL unloading session multiplexing based on a TLS1.3 protocol, the system comprises a client, a ciphertext module, a load balancing device, a plaintext module and a server, the ciphertext module comprises a NewSession Ticket data transmission system based on the TLS1.3 protocol, and Ticket data in the data transmission system comprises the following parts: key_name, IV, encrypted_state, HMAC value and the like. According to the NewSession Ticket data transmission system disclosed by the invention, the safety and the integrity of the data are ensured and enhanced; compared with common session multiplexing logic, the session multiplexing provided by the invention has the advantages that three times of operation are reduced, so that the session multiplexing speed is increased.

Description

Technical field [0001] The present invention relates to the field of network application delivery control, and in particular, to a system and method for implementing SSL uninstall session based on TLS1.3 protocol. Background technique [0002] The TLS1.3 protocol is the strengthening version of the SSL / TLS protocol, similar to the SSL / TLS protocol on the entire protocol format. Such as figure 1 As shown, the SSL / TLS protocol provides the following two functions for network communication: a. Create a secure connection, that is, the data transmitted is encrypted, preventing it from being sniffed by the middleman, and provides a complete artificial school for data. The data to prevent transmission is modified by the middleman. b. Establish a trusted connection, that is, providing identity authentication on the entity connected to both sides. The present invention relates to the latest version of the TLS1.3 protocol, which is discarded the previous RSA key negotiation algorithm...

AI Technical Summary

Problems solved by technology

However, because the PSK identity of the TLS1.3 protocol needs to contain the PSK value, not only the data transmission system of NewSessionTicket in RFC5077 cannot store the PSK value, but also if image 3 As shown, the session logic commonly used in the existing technology is that when the client wants to use a certain ticket for session multiplexing, it encapsulates the ticket in the pre_shared_key extension and sends it to the server. After receiving the extension, the server sends the pre_shared_key parses out the PSK value, then derives the Early Secret, then derives the binder_key through the Early Secret, and then calculates the hmac_key to verify the PSKidentity value through the binder_key, and then uses the hmac_key to perform HMAC (hash message authentication) on the message between clienthello and binder Code) operation, the calculated value is compared with the binder value corresponding to the PSKidentity, if they are the same, the verification succeeds, otherwise the verification fails

This method requires more than three logical operations, which takes a long time and the system efficiency is low

Images