Research On A Secure E-Commerce Payment Protocol Based On Four Parties

With the rapid development of Internet, and the quickly popularization of E-commerce, more and more people pay attention to the security of electronic payment. Especially the atomicity of electronic payment becomes one of hot topics in the e-commerce field. About the atomicity, most of the existing e-commerce payment protocols just assure the money atomicity, and the researches about the goods atomicity and certified delivery are only focused on the digital goods. There are few researches about the goods atomicity and certified delivery on traditional goods.Analysing the modes and protocols of exsit electronic payment, the deficiencies and some improvements on Secure Electronic Transaction (SET) protocol are mainly studied. Aiming at the standard SET protocol, some improvement has been done for the SET protocol in order to assure the goods atomicity and certified delivery. Then, a secure e-commerce payment protocol is proposed based on four parties that can not only support the goods atomicity and certified delivery, but also access the key electronic evidence automatically and deal with the transaction disputes. In the meantime, the formal description of the protocol is presented. Finally, the security of the proposed protocol is compared and analyzed.According to the secure e-commerce payment protocol based on four parties, a finite state model is built, and CTL (Computation Tree Logic) formulations of the security properties are presented. Then the secure atomicity is verified by the popular tool namely SMV (symbolic model checking).The secure e-commerce payment protocol based on four parties is only suitable for paying with credit card as same as the SET protocol. Therefore, we expand its data structure, design the function of paying with debit card and describe it with the Abstract Syntax Notation One (ASN1.0). Finally, the software modules of the e-commerce payment system are designed simply.