User Authentication in SSL Handshake Protocol with Zero-Knowledge Proof

Abstract

In this paper, we create secure SSL protocol with zero-knowledge proof which proposed an intruder should not be able to substitute false certificates and masquerade as client or sever. We add Zero-Knowledge proof where certificate transfer directly into both parties. The new scheme was shown to be more secure against the known attacks for SSL. This protocol has characteristics which have identification and authentication of both parties when use to SSL handshake protocol.