安全消息中间件的设计

为提高消息中间件的安全性,分析了消息中间件的特点和Kerberos协议的认证过程,考虑到Kerberos认证模型的安全缺陷,采用公钥密码体制和椭圆曲线的Diffie-Hellman算法改进Kerberos认证模型。该模型引入了可信的第三方CA,有效地防止了口令猜测攻击和重放攻击。采用椭圆曲线的Diffie-Hellman算法,密钥由通信双方共同决定,防止了Kerberos本身进行攻击。将改进后的Kerberos认证模型运用到消息中间件当中,在一定程度上增强了消息中间件的安全性。

Design of secure message oriented middleware

To improve the security of message oriented middleware,characteristics of message oriented middleware and the authentication process of Kerberos protocol are analyzed.The security flaws of Kerberos authentication model are taken into consideration.Using public key cryptography and the elliptic curve Diffie-Hellman algorithm,the Kerberos authentication is improved.To effecitively prevented password guessing attacks and replay attacks,credible third-party CA is introduced in this model.To prevent the attacks ...