SSL/TLS-based Secure Tunnel Gateway System Design and Implementation

Facing with the lack of security in current running client/server systems, this paper designs and implements a kind of secure tunnel gateway system based on SSL/TLS protocol in order to provide seamless security integration to them. Client side tunnel gateway and server side tunnel gateway authenticate each other based on X.509 certificate, and create SSL/TLS connections to transmit the clients' requests and servers' responses. The gateway system uses normal TCP/IP connections to transmit data with the clients and servers, it provides confidentiality, integrity and authentication for clients/servers data transmission, which needs no modification to them.