|
|
||||||||||||||||
|
|||||||||||||||||
|
|
||||||||||||||||
|
One of the most up-to-date methods currently used to secure communication over the Internet is
the SSL standard, which defines a universal security protocol used mainly to secure communication
with web servers and therefore with e-business and Internet banking applications.
The advantages of using the SSL standard include a high level of security as well as the
client's independence on a specific computer and his/her maximum convenience.
Principle of the SSL protocolThe basis for ensuring a secure connection using SSL are "certificates".
A certificate contains information on its owner, his/her public key, and information
about the certification authority that issued the certificate; all the information is digitally
signed. Every communicating party uses the public key to verify the digital signature of the
certificate and reads information about the other party from the certificate. Trusting the
certification authority that issued the certificate is a necessary prerequisite here.
Encryption is performed using keys that are automatically generated based on randomly selected
data. At the same time, the data (and, of course, the actual keys) are protected from being
obtained, or anticipated, by any third party.
The verification of the identity of the server with which the client communicates is
automatically ensured by an Internet browser. The client may have to confirm whether he or she
trusts the certification authority that issued the other party's certificate.
|
||||||||||||||||