Improving TLS Protocol Using Identity-Based Double-certificate Mechanism

Although Identity-Based Cryptography (IBC) has many attractive properties, its application is restricted for lacking of security protocols supporting. To overcome this problem, we propose an improved Transport Layer Security (TLS) protocol using identity-based double-certificate mechanism (IBDC_TLS) in this paper. Firstly, the concept of identity-based double-certificate is presented. Secondly, by designing new cipher suites, IBC is appended to security parameters. At last, by modifying protocol message parameters, the TLS protocol is improved to fit the double-certificate mechanism. The results show that IBDC_TLS has advantages of lightweight and efficiency of IBC and flexibility of key recovery and management of double-certificate mechanism, as well as easy to deploy.