TLS protocol extensions for web applications of identity-based encryption

Compared with the RSA used in PKI, identity based encryption (IBE) can provide the same security with lower computation consumption and remove the need for certificates. However, there are still many problems of IBE when it is in the rush to market and just few successful business solutions were presented now. In this paper, we first propose a practical IBE application architecture. Then, we present two improved TLS handshakes to meet the requirements of secure communication, describe the details proceeding on identity authentication and key exchange. Finally, we analyze the security and efficiency.