信息安全技术在WebSocket实时通信的应用研究

发布时间：2018-01-03 03:39

本文关键词：信息安全技术在WebSocket实时通信的应用研究　出处：《华北电力大学》2016年硕士论文　论文类型：学位论文

【摘要】：随着Web技术的迅速发展,尤其是通信技术的日趋成熟,实时通信技术在股票价格、新闻报道、余票查询、交通情况等领域中有着广泛的应用,但是目前的实时Web应用的实现方式,都是基于HTTP协议,围绕着轮询和其他服务器推送技术展开的,所以不可避免的产生大量的额外的报头数据,造成传输时延。HTML5中的WebSocket协议是基于浏览器与服务器全双工通信的新理论。客户端通过WebSocket与服务器进行通信时,只有第一次握手交互信息比较复杂,在握手成功后便进入全双工的数据传输阶段,降低了数据流量与传输时延。而WebSocket实时通信的日益发展的同时,也不得不注意其可能存在的安全风险,通信系统的安全性直接关系到通信企业的网络运行质量。本文首先通过对目前常用的实时通信的技术及理论,如轮询、基于Ajax的长轮询、Comet和基于流方式等的研究,阐述了各自的优缺点,总体来说都存在传输时延,浪费网路流量等问题,进而提出一种基于WebSocket新的解决方案。简化了数据通信的繁琐,提高了系统资源的利用率,大大降低了网络时延和传输时延。然后系统概括了Web实时通信中可能遇到的安全问题。接着对WebSocket协议及协议中的安全特性进行了深入研究。随后针对WebSocket握手认证的算法公开所带来的安全威胁及WebSocket数据传输的安全隐患,这两个主要矛盾,提出一种新的安全通信方案,包括基于WebSocket协议的设计与实现以及Web平台的安全登录认证、数据加密传输的设计与实现,信息安全理论的应用提高了基于WebSocket协议的实时通信系统的安全性。最后,为了验证本文提出方案的有效性,通过对比WebSocket与HTTP请求和响应报头数据所需要的网络开销及内存消耗,证明了WebSocket方案实时通信的优势,实现了延迟的缩减。同时安全通信方案的实现,也表明此方案有较低的时延,证明了其可行性。满足了通信系统对实时性和安全性的要求。
[Abstract]:With the rapid development of Web technology, especially the maturation of communication technology, real-time communication technology has been widely used in the fields of stock price, news report, residual ticket query, traffic situation and so on. However, the current implementation of real-time Web applications is based on the HTTP protocol, around polling and other server push technology, so it is inevitable to produce a lot of additional header data. The WebSocket protocol in HTML5 is based on the new theory of full-duplex communication between browser and server. When the client communicates with the server through WebSocket. Only the first handshake interactive information is more complex, after the successful handshake into the full duplex stage of data transmission. The data traffic and transmission delay are reduced. With the development of WebSocket real-time communication, we have to pay attention to the possible security risks. The security of communication system is directly related to the network quality of communication enterprises. Firstly, through the common real-time communication technology and theory, such as polling, long polling based on Ajax. The advantages and disadvantages of Comet and streaming based methods are discussed. In general, there are some problems such as transmission delay, waste of network traffic and so on. Furthermore, a new solution based on WebSocket is proposed, which simplifies the complexity of data communication and improves the utilization of system resources. The network delay and transmission delay are greatly reduced. Then the security problems that may be encountered in Web real-time communication are summarized. Then, the security characteristics of WebSocket protocol and protocol are studied in depth. Then, the security threat and the security hidden danger of WebSocket data transmission are exposed for the WebSocket handshake authentication algorithm. This paper proposes a new secure communication scheme, including the design and implementation of WebSocket protocol, the secure login authentication of Web platform, and the design and implementation of data encryption transmission. The application of information security theory improves the security of real-time communication system based on WebSocket protocol. Finally, in order to verify the effectiveness of the proposed scheme. By comparing the network overhead and memory consumption between WebSocket and HTTP request and response header data, the advantage of real-time communication of WebSocket scheme is proved. At the same time, the implementation of the secure communication scheme also shows that the scheme has lower delay and proves its feasibility, and meets the requirements of real-time and security of the communication system.
【学位授予单位】：华北电力大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP393.09

【相似文献】