KR20190129478A - Ssl/tls based network security apparatus and method - Google Patents

Abstract

The present invention relates to secure socket layer/transport layer security (SSL/TLS) based network security apparatus and method. According to the present invention, the SSL/TLS based network security apparatus comprises: a security capability setting unit which determines a channel cipher suite in a cipher suite set according to a first communication environment and sets a security capability of a client; a communication channel authentication unit configured to provide a server public key to the client to allow the client to perform server authentication, and receive a client public key from the client to perform client authentication for the client when the server authentication is successfully performed, and to create a mutual authentication channel; and an encryption communication performing unit which provides, when the mutual authentication channel is created, a confidentiality of data communicated on the mutual authentication channel by determining a data cipher suite in a data cipher suite set according to a second communication environment.

Description

SSL / TLS based network security device and method {SSL / TLS BASED NETWORK SECURITY APPARATUS AND METHOD}

The present invention relates to an SSL / TLS-based network security technology, and more particularly, to an SSL / TLS-based network security device and method that can enhance security by applying a domestic encryption algorithm to SSL / TLS for an IoT environment. It is about.

Recently, as the communication environment using wired / wireless communication has increased in various fields such as IoT market, industrial control system, and national infrastructure, the threat of data exposure in public network is increasing. The need is also increasing. As a security countermeasure, there is a communication security method using encryption algorithms such as section encryption and SSL VPN, but there is a problem that it is difficult to be used where security is very important such as national infrastructure.

Secure Socket Layer (SSL) means 'secure socket layer' and is an Internet protocol protocol developed by Netscape to allow secure transactions of information security delivered over the Internet.TLS (Transport Layer Security) uses SSL 3.0 It is based on the protocol created by the Internet Engineering Task Force (IETF). TLS is designed to make SSL 3.0 more secure and to make protocol specifications more accurate and stable.

Korea Patent Registration No. 10-0846868 (2008.07.10)

An embodiment of the present invention is to provide an SSL / TLS-based network security device and method that can enhance the security by applying a domestic encryption algorithm that satisfies the KCMVP verification criteria in the wired / wireless encryption device for IoT to SSL / TLS.

An embodiment of the present invention is an SSL / TLS-based network security device that can provide data confidentiality and integrity, random number generation, message authentication, key setting, and digital signature by automatically adjusting the security strength according to the communication environment with the client. And to provide a method.

An embodiment of the present invention is to provide an SSL / TLS-based network security device and method that can be used for the development of information security products by applying the domestic encryption algorithm KCMVP encryption module.

Among the embodiments, the SSL / TLS (Secure Socket Layer / Transport Layer Security) based network security device determines the channel cipher suite in the cipher suite set according to the first communication environment to improve the security capability of the client. A security capability setting unit configured to provide a server public key to the client to allow the client to perform server authentication, and if the server authentication is successful, receive a client public key from the client to perform client authentication for the client Thus, the communication channel authentication unit for generating a mutual authentication channel and the mutual authentication channel is generated, the data encryption suite in the data encryption suite set according to the second communication environment to determine the confidentiality of the data communicated on the mutual authentication channel It provides an encrypted communication performing unit.

The security capability setting unit may set the security strength of the channel cipher suite to be stronger than the security strength of the data cipher suite.

The security capability setting unit may determine the channel cipher suite to which the Korea Cryptographic Module Validation Program (KCMVP) validated cipher module is applied to the key exchange algorithm and the MAC algorithm according to the first communication environment.

The communication channel authentication unit may further receive a pre-master secret encrypted using the server public key from the client when the server authentication is successfully performed.

The encryption communication performing unit may determine the data encryption suite to which the KCMVP verified encryption module is applied to the encryption algorithm according to the second communication environment.

The encryption communication execution unit may determine the data cipher suite in consideration of both the first communication environment and the second communication environment.

The encryption communication performing unit may determine the data cipher suite configured of ARIA-128-CBC and SHA256 regardless of the second communication environment to provide confidentiality and integrity of data communicated on the mutual authentication channel.

Among the embodiments, the SSL / TLS-based network security method determines a channel cipher suite in a set of channel cipher suites according to a first communication environment to establish a security capability of the client, and discloses the server to the client. Providing a key to allow the client to perform server authentication, and if the server authentication is successful, receiving a client public key from the client to perform client authentication for the client, generating a mutual authentication channel, and the mutual If an authentication channel is created, determining the data cipher suite in the data cipher suite in accordance with a second communication environment to provide confidentiality of the data communicated on the mutual authentication channel.

The disclosed technique can have the following effects. However, since a specific embodiment does not mean to include all of the following effects or only the following effects, it should not be understood that the scope of the disclosed technology is limited by this.

The SSL / TLS-based network security device and method satisfying the KCMVP verification criterion in the wired / wireless encryption apparatus for IoT according to an embodiment of the present invention automatically adjusts the security strength according to the communication environment with the client, thereby providing data confidentiality and integrity, It can provide random number generation, message authentication, key setting, and digital signature.

The SSL / TLS-based network security apparatus and method according to an embodiment of the present invention may be able to develop an information security product using a KCMVP encryption module by applying a domestic encryption algorithm.

1 is a diagram illustrating an SSL / TLS based network security system according to an embodiment of the present invention.
FIG. 2 is a block diagram illustrating a network security device of FIG. 1.
3 is a flowchart illustrating a network security process performed in the network security device of FIG. 1.
4 is a diagram for explaining the detailed four steps of the handshake of the SSL / TLS.
5 to 8 are diagrams illustrating each step constituting the handshake step.
FIG. 9 is an exemplary view illustrating a cipher suite used in the network security device of FIG. 1.
FIG. 10 is an exemplary view illustrating a data cipher suite used in the network security device of FIG. 1.

Description of the present invention is only an embodiment for structural or functional description, the scope of the present invention should not be construed as limited by the embodiments described in the text. That is, since the embodiments may be variously modified and may have various forms, the scope of the present invention should be understood to include equivalents capable of realizing the technical idea. In addition, the objects or effects presented in the present invention does not mean that a specific embodiment should include all or only such effects, the scope of the present invention should not be understood as being limited thereby.

On the other hand, the meaning of the terms described in the present application should be understood as follows.

Terms such as "first" and "second" are intended to distinguish one component from another component, and the scope of rights should not be limited by these terms. For example, the first component may be named a second component, and similarly, the second component may also be named a first component.

When a component is referred to as being "connected" to another component, it should be understood that there may be other components in between, although it may be directly connected to the other component. On the other hand, when a component is referred to as being "directly connected" to another component, it should be understood that there is no other component in between. On the other hand, other expressions describing the relationship between the components, such as "between" and "immediately between" or "neighboring to" and "directly neighboring to", should be interpreted as well.

Singular expressions should be understood to include plural expressions unless the context clearly indicates otherwise, and terms such as "comprise" or "have" refer to a feature, number, step, operation, component, part or implementation thereof. It is to be understood that the combination is intended to be present and does not exclude in advance the possibility of the presence or addition of one or more other features or numbers, steps, operations, components, parts or combinations thereof.

In each step, an identification code (e.g., a, b, c, etc.) is used for convenience of description, and the identification code does not describe the order of the steps, and each step clearly indicates a specific order in context. Unless stated otherwise, they may occur out of the order noted. That is, each step may occur in the same order as specified, may be performed substantially simultaneously, or may be performed in the reverse order.

The present invention can be embodied as computer readable code on a computer readable recording medium, and the computer readable recording medium includes all kinds of recording devices in which data can be read by a computer system. . Examples of computer-readable recording media include ROM, RAM, CD-ROM, magnetic tape, floppy disk, optical data storage device, flash memory, and the like. The computer readable recording medium can also be distributed over network coupled computer systems so that the computer readable code is stored and executed in a distributed fashion.

All terms used herein have the same meaning as commonly understood by one of ordinary skill in the art unless otherwise defined. Generally, the terms defined in the dictionary used are to be interpreted to coincide with the meanings in the context of the related art, and should not be interpreted as having ideal or excessively formal meanings unless clearly defined in the present application.

SSL VPN is a virtual private network product using the standard SSL / TLS security protocol. It provides a secure communication environment and also provides access control control functions by authenticating and identifying the identifiable entities in the network environment. The SSL / TLS standard security protocol can secure the reliability of the communication connection by verifying the identity of the other party and confirming that it is the correct user or entity. SSL / TLS standard security protocol can issue keys used for secure communication through key exchange and key matching process by using security media that are duly shared. SSL VPN can use this issued key to provide data confidentiality and integrity, random number generation, message authentication, key setting, and digital signature.

The process of issuing a key used for secure communication in the SSL / TLS standard security protocol is a handshake phase of SSL / TLS and may be composed of four detailed steps internally. The handshake step may correspond to a process for the client and server to determine the algorithm and shared key to use for cryptographic communication and to exchange certificates. Here, determining the shared key may be for performing cryptographic communication, and exchanging certificates may be for authenticating each other. The handshake step is described in more detail in conjunction with the following Figures 4-8.

4 is a diagram for explaining the detailed four steps of the handshake of the SSL / TLS.

Referring to FIG. 4, the handshake phase of the SSL / TLS may be composed of four detailed steps internally. The handshake phase may set a security capability in a first phase (Phase I) and perform server authentication and key exchange in a second phase (Phase II). In addition, the handshake phase may perform client authentication and key exchange in a third phase (Phase III), and terminate the handshake protocol in a fourth phase (Phase IV).

5 to 8 are diagrams illustrating each step constituting the handshake step.

Referring to FIG. 5, in a handshake first step, a client may transmit a ClientHello message to a server, and the server may transmit a ServerHello message to the client in response to the ClientHello message. ClientHello and ServerHello messages may include session ID, key exchange algorithm, MAC algorithm, cryptographic algorithm, initial random number, and the like.

More specifically, the client may send a ClientHello message to the server, including version information available, client random number, session ID, list of available cipher suites, list of available compression methods, and the like. The server can send a ServerHello message to the client, including version information, server random numbers, session IDs, cipher suites used, and compression methods used.

Referring to FIG. 6, in the handshake second step, the server may transmit a Certificate, ServerKeyExchange, CertificateRequest, and ServerHelloDone messages to the client in sequence. The Certificate message can contain the server's certificate, and the ServerKeyExchange message can contain the server's public key. The CertificateRequest message may contain a list of certificate types or certificate authority names that the server can understand. The server's certificate is issued by a certification authority and can be used to authenticate that the server is trusted.

Referring to FIG. 7, in a third step of the handshake, the client may sequentially transmit a Certificate, ClientKeyExchange, and CertificateVerify messages to the server. The Certificate message can contain the client's certificate and the ClientKeyExchange message can contain the client's public key. The CertificateVerify message may include the result of verifying the server's certificate.

More specifically, the client can obtain the server's certificate from a Certificate message received from the server, and the certificate is expired, issued by a trusted certification authority, or a certificate issued formally by that server. You can verify the server's certificate by checking whether the For example, a client can perform certificate verification by verifying the digital signature attached to the server's certificate using the public key of a trusted certificate authority stored in the client. If the client determines that the server's certificate is trusted, it can notify the server by sending a CertificateVerify message.

Referring to FIG. 8, in the fourth step of the handshake, the client may transmit the ChangeCipherSpec and Finished messages to the server in turn, and the server may transmit the ChangeCipherSpec and Finished messages in response. The ChangeCipherSpec message is a message indicating that the encryption method has been changed and that subsequent transmissions are encrypted / hashed according to the negotiated CipherSpec and key value, and the Finished message is a message indicating that the handshake process is completed.

More specifically, the client may inform the server of the Cipherspec that can be allowed by the client by sending a ChangeCipherSpec message, and the server may include the Cipherspec allowed by the server in the Cipherspec sent by the client to the ChangeCipherSpec message. The client and server can finally send a Finished message to indicate that the handshake process is complete.

1 is a diagram illustrating an SSL / TLS based network security system according to an embodiment of the present invention.

Referring to FIG. 1, the SSL / TLS based network security system 100 may include a client 110, a network security device 130, and a database 150.

The client 110 may correspond to a computing device that communicates with the network security device 130 through a communication channel, and may be implemented as a smartphone, a notebook, or a computer, and is not limited thereto. May also be implemented. The client 110 may be connected to the network security device 130 through a network, and at least one client 110 may be connected to the network security device 130 at the same time.

The network security device 130 may be implemented as a server corresponding to a computer or a program capable of creating a communication channel for providing confidentiality and integrity of data for communication with the client 110. The network security device 130 may be wirelessly connected to the client 110 through Bluetooth, WiFi, LTE, Ethernet, and the like, and may exchange data with the client 110 through a network.

The network security device 130 may be implemented including a database 150 and may be implemented separately from the database 150. When implemented separately from the database 150, the network security device 130 may be connected to the database 150 to transmit and receive data.

The database 150 may store various pieces of information that the network security device 130 uses to create a communication channel with the client 110. For example, the database 150 may store authentication data exchanged with each other for mutual authentication between the client 110 and the network security device 130, and may store encryption algorithms and setting information used for communication security. However, the present invention is not limited thereto, and information collected or processed in various forms may be stored in a process of creating a communication channel between the client 110 and the network security device 130.

The database 150 may be composed of at least one independent sub-databases that store information belonging to a specific range, and may be configured as an integrated database in which at least one independent sub-databases are integrated into one. When composed of at least one independent sub-database, each sub-database may be wirelessly connected through Bluetooth, WiFi, LTE, and the like, and may exchange data with each other through a wired network such as Ethernet. In the case of an integrated database, the sub-databases may be integrated into one and may include a control unit for managing data exchange and control flow between the sub-databases.

FIG. 2 is a block diagram illustrating a network security device of FIG. 1.

2, the network security device 130 may include a security capability setting unit 210, a communication channel authentication unit 230, an encryption communication execution unit 250, and a control unit 270.

The security capability setting unit 210 may determine the channel cipher suite in the cipher suite set according to the first communication environment to set the security capability of the client 110. Here, the channel cipher suite may correspond to a recommended set of key exchange algorithms and MAC algorithms used in the process of performing mutual authentication between the client 110 and the network security device 130, and the channel cipher suite is a security capability. The setting unit 210 may correspond to a collection of various channel cipher suites selectable.

The first communication environment may correspond to an element directly related to the wireless communication channel as an external factor that may affect the quality of wireless communication between the client 110 and the network security device 130. For example, the client 110 ) And the distance between the network security device 130, the type of wireless communication, the strength of the communication signal, and the like. The security capability setting unit 210 may set the security capability of the client 110 by determining a channel cipher suite that is most suitable for the first communication environment. In another embodiment, the security capability setting unit 210 may set the security capability of the client 110 using a channel cipher suite requested by the client 110 regardless of the first communication environment.

In one embodiment, the security capability setting unit 210 may set the security strength of the channel cipher suite to be stronger than the security strength of the data cipher suite. The security capability setting unit 210 considers that the communication channel generation process between the client 110 and the network security device 130 is more vulnerable to security than the data transmission process. You can set the security strength stronger than that of the data cipher suite. The security capability setting unit 210 may set the security strength of the cipher suite by selecting any one of the channel cipher suites composed only of algorithms having a security level of at least a certain level.

According to an embodiment, the security capability setting unit 210 may apply a channel cipher suite to which a Korea Cryptographic Module Validation Program (KCMVP) validated encryption module is applied to a key exchange algorithm and a message authentication code (MAC) algorithm according to a first communication environment. You can decide. Here, KCMVP corresponds to the Korean Cryptographic Module Verification System and is being implemented by the National Intelligence Service to secure the safety of commercial security products introduced in national and public institutions.

The security capability setting unit 210 determines a channel cipher suite including the key exchange algorithm and the MAC algorithm that has passed the KCMVP verification in the channel cipher suite set to generate a communication channel between the client 110 and the network security device 130. Can enhance the security strength. For example, the security capability setting unit 210 may determine a cipher suite including at least one of RSA and ECDSA, which are public key based encryption algorithms provided by the KCMVP verified cryptographic module, as a channel cipher suite.

The communication channel authentication unit 230 provides the server public key to the client 110 so that the client 110 performs server authentication, and if the server authentication is successfully performed, the communication channel authentication unit 230 receives the client public key from the client 110 to receive the client ( Client authentication for 110 may be performed to generate a mutual authentication channel. Here, the server may correspond to the network security device 130.

The client 110 may perform server authentication using a server public key and a server certificate provided from the communication channel authentication unit 230. More specifically, the client 110 may perform server authentication by checking whether the server public key and the server certificate are trustworthy. For example, the client 110 may keep its own list of trusted certificate authorities, and whether the server public key and the server certificate provided from the communication channel authentication unit 230 are issued by a trusted certificate authority. Server authentication can be performed by checking whether the period has not expired.

When server authentication is successfully performed at the client 110, the communication channel authentication unit 230 may receive a client public key from the client 110 and perform client authentication. More specifically, the communication channel authenticator 230 may perform client authentication by confirming that the client public key and the client certificate are trustworthy.

In one embodiment, the communication channel authentication unit 230 may further receive a pre-master secret encrypted using the server public key from the client 110 when the server authentication is successfully performed. . Here, the pre-master secret may correspond to a random number generated by the client 110 and may be used to generate a master secret. For example, server and client 110 may generate a master secret using the pre-master secret, the client random number, and the server random number, respectively.

The master secret may correspond to a secret value agreed between the client 110 and the server and may be used to guarantee the confidentiality of the communication. The master secret can be used to generate a session key used for encrypting communication between the client 110 and the server. For example, the master secret can be used to generate an initialization vector for use in symmetric cryptographic keys, message authentication code keys and symmetric cryptographic CBC modes.

Client 110 can generate any pre-master secret and can encrypt the pre-master secret using the server public key. In addition, the client 110 may include the pre-master secret in the ClientKeyExchange message and send it to the network security device 130. The communication channel authentication unit 230 may decrypt the received information to obtain a pre-master secret, and generate a master secret using the pre-master secret.

When the mutual authentication channel is generated, the encryption communication performing unit 250 may determine the data cipher suite in the data cipher suite according to the second communication environment to provide confidentiality of data communicated on the mutual authentication channel. When mutual authentication between the client 110 and the network security device 130 is completed, the client 110 and the network security device 130 may share the same session key, and the encryption communication execution unit 250 may use the session key. Can be used to encrypt or decrypt data.

Here, the data cipher suite may correspond to the recommended set of cryptographic algorithms used in the data transmission process between the client 110 and the network security device 130, and the data cipher suite is selected by the encryption communication performing unit 250. It may correspond to a collection of various possible data cipher suites. The second communication environment may correspond to factors directly related to the client 110 as external factors that may affect the quality of wireless communication, and may include, for example, the performance, compatibility and importance of the client 110. Can be.

The encryption communication performing unit 250 may determine a data cipher suite that is most suitable for the second communication environment, and provide confidentiality of the data by encrypting or decrypting the data using an encryption algorithm and a session key included in the data cipher suite. have. In another embodiment, the encryption communication performing unit 250 may provide the confidentiality of the data communicated on the mutual authentication channel by determining the data cipher suite requested by the client 110 regardless of the second communication environment.

In one embodiment, the encryption communication performing unit 250 may determine the data encryption suite to which the KCMVP verified encryption module is applied to the encryption algorithm according to the second communication environment. The cryptographic communication performing unit 250 may enhance the security strength in the data exchange between the client 110 and the network security device 130 by determining the configured data encryption suite including the encryption algorithm that passed KCMVP verification in the data encryption suite set. Can be. For example, the encryption communication performing unit 250 may determine a cipher suite including at least one of ARIA, SEED, HiGHT, and LEA, which are domestic encryption algorithms provided by the KCMVP verified cryptographic module, as a data cipher suite.

In one embodiment, the encrypted communication performing unit 250 may determine the data cipher suite in consideration of both the first communication environment and the second communication environment. More specifically, the encrypted communication performing unit 250 may determine at least one of the distance between the client 110 and the network security device 130, the type of wireless communication, the strength of the communication signal, the performance, compatibility, and importance of the client 110. By considering the data cipher suite in consideration, the security strength of the wireless communication can be adjusted.

In one embodiment, the encryption communication performing unit 250 may weight each of the first communication environment and the second communication environment, and determine the data cipher suite according to the weighted first communication environment and the second communication environment. For example, the encryption communication performing unit 250 assigns a weight of 2 to the elements included in the first communication environment, and assigns a weight of 0.5 to the elements included in the second communication environment, respectively, The security strength required for the data communication may be determined in consideration of the overall communication environment determined by, and the data cipher suite meeting the security strength may be determined.

In one embodiment, the cryptographic communication performer 250 determines a data cipher suite comprised of ARIA-128-CBC and SHA256 regardless of the second communication environment to provide confidentiality and integrity of the data communicated on the mutual authentication channel. Can be. Although the encrypted communication performing unit 250 may determine an appropriate data cipher suite in consideration of the second communication environment after the mutual authentication channel between the client 110 and the network security device 130 is generated, considering the second communication environment In difficult or impossible cases, a predetermined data encryption suite can be used. The encryption communication execution unit 250 provides a data encryption suite composed of a 128-bit key length and an ARIA and a hash function SHA256 set to the CBC operation mode as a default setting so that a low-security encryption algorithm is not used even if there is no separate setting. can do.

The controller 270 controls the overall operation of the network security device 130 and manages the control flow or data flow between the security capability setting unit 210, the communication channel authentication unit 230, and the encryption communication performing unit 250. Can be.

3 is a flowchart illustrating a network security process performed in the network security device of FIG. 1.

Referring to FIG. 3, the network security device 130 may set the security capability of the client 110 by determining the channel cipher suite in the set of channel cipher suites according to the first communication environment through the security capability setting unit 210. (Step S310).

The network security device 130 provides the server public key to the client 110 through the communication channel authentication unit 230 to allow the client 110 to perform server authentication, and from the client 110 when the server authentication is successfully performed. Receiving the client public key to perform a client authentication for the client 110, it is possible to create a mutual authentication channel (step S330).

When the mutual authentication channel is generated through the cryptographic communication performing unit 250, the network security device 130 determines the data cipher suite in the data cipher suite according to the second communication environment, thereby maintaining the confidentiality of the data communicated on the mutual authentication channel. It can be provided (step S350).

9 is an exemplary view illustrating a cipher suite used in the network security device of FIG. 1.

Referring to FIG. 9, the network security device 130 may exchange a key exchange algorithm, a MAC algorithm, an encryption algorithm, an electronic signature algorithm, and the like used in a handshake process together with components. More specifically, the network security device 130 may replace the cipher algorithm with another cipher algorithm when a defect is found in the cipher algorithm being used. The network security device 130 may define and use a recommended set of cipher suites used in the handshake process as a cipher suite, and FIG. 9 illustrates an embodiment of a cipher suite composed of KCMVP verified ciphers.

FIG. 10 is an exemplary diagram illustrating a data encryption suite used in the network security device of FIG. 1.

Referring to FIG. 10, the network security device 130 may use a block cipher algorithm to provide confidentiality and integrity of data after a mutual authentication channel with the client 110 is created. The network security device 130 may use the domestic encryption algorithms ARIA, SEED, HiGHT, and LEA provided by the KCMVP verified encryption module as the block encryption algorithm. In particular, the network security device 130 may use an encryption algorithm provided by the KCMVP verified cryptographic module, not an encryption algorithm provided by SSL for SEED, which is one of the block encryption algorithms.

In addition, the network security device 130 may use a hash function provided by the KCMVP verified cryptographic module as a hash function used at all stages of the handshake. In FIG. 10, the network security device 130 may use any one of ARIA, SEED, HiGHT, and LEA as a block encryption algorithm for data confidentiality, and may use any one of ECB, CBC, and GCM as an operation mode. The network security device 130 may use SHA256 as a hash function.

Although described above with reference to a preferred embodiment of the present invention, those skilled in the art will be variously modified and changed within the scope of the invention without departing from the spirit and scope of the invention described in the claims below I can understand that you can.

100: SSL / TLS based network security system
110: Client 130: Network Security Device
150: database
210: security capability setting unit 230: communication channel authentication unit
250: encrypted communication performing unit 270: control unit

Claims (8)

A security capability setting unit configured to set a security capability of a client by determining a channel cipher suite in a cipher suite set according to the first communication environment;
Providing a server public key to the client to allow the client to perform server authentication, and if the server authentication is successful, receives a client public key from the client to perform client authentication for the client, thereby generating a mutual authentication channel. A communication channel authentication unit; And
When the mutual authentication channel is generated, SSL / TLS (Encryption Communication Execution Unit) includes a cryptographic communication execution unit that provides a confidentiality of data communicated on the mutual authentication channel by determining a data encryption suite in a data encryption suite set according to a second communication environment. Network security device based on Socket Layer / Transport Layer Security.
The method of claim 1, wherein the security capability setting unit
SSL / TLS-based network security device, characterized in that the security strength of the channel cipher suite is set stronger than the security strength of the data cipher suite.
The method of claim 1, wherein the security capability setting unit
Based on the first communication environment, the SSL / TLS-based SSL / TLS-based SSL / TLS-based cipher suite to which the KCMVP (Korea Cryptographic Module Validation Program) verified cryptographic module is applied is determined for a key exchange algorithm and a MAC (Message Authentication Code) algorithm. Network security devices.
The method of claim 1, wherein the communication channel authentication unit
SSL / TLS-based network security device, characterized in that further receiving a pre-master secret encrypted using the server public key from the client when the server authentication is successfully performed.
The method of claim 1, wherein the encryption communication performing unit
SSL / TLS-based network security device, characterized in that for determining the data encryption suite to which the KCMVP validated encryption module is applied to the encryption algorithm according to the second communication environment.
The method of claim 1, wherein the encryption communication performing unit
SSL / TLS-based network security device, characterized in that for determining the data cipher suite in consideration of both the first communication environment and the second communication environment.
The method of claim 1, wherein the encryption communication performing unit
SSL / TLS-based network, characterized in that it provides the confidentiality and integrity of the data communicated on the mutual authentication channel by determining the data cipher suite consisting of ARIA-128-CBC and SHA256 irrespective of the second communication environment Security device.
In the network security method performed in a network security device based on SSL / TLS (Secure Socket Layer / Transport Layer Security),
Determining a channel cipher suite in a set of channel cipher suites according to the first communication environment to establish a security capability of the client;
Providing a server public key to the client to allow the client to perform server authentication, and if the server authentication is successful, receives a client public key from the client to perform client authentication for the client, thereby generating a mutual authentication channel. Making; And
Determining the data cipher suite in the set of data cipher suites according to a second communication environment when the mutual authentication channel is created to provide confidentiality of data communicated on the mutual authentication channel. Way.

Images