E-Commerce Trust Research Based On PKI

Compared with traditional commerce, electronic commerce has many advantages: high efficiency, low cost, high quality service and so on. In recent years, trust problems have received growing attentions especially in e-commerce. Study shows that trust relationships between the trade partners decide whether the trade can be successfully developed. However, till now seldom literatures have thoroughly discussed the trust problems in e-commerce from both theories and applications. However, e-commerce progress desires a thoroughgoing study on the trust theories and applications.For Public Key Infrastructure (PKI) can provide various security services, at present it is widely used in e-commerce. Therefore, in this dissertation all the problems we studied are basal on PKI. This dissertation deeply investigates basic trust theories and management framework in e-commerce. Moreover, this dissertation also discusses these theories applications in e-commerce.The main works and contributions of this dissertation can be summarized as follows:1. This dissertation first makes thorough analysis on basic trust theories and applications. According to this, an exact and complete definition on trust in e-commerce is presented. In terms of our definition, we summarize the properties of trust and categorize the trust problems studied in information field into two main categories. Based on it, a trust management framework used in e-commerce is proposed. First, this framework fits our trust definition well and it almost contains all the research issues on e-commerce trust. Furthermore, it can be used in the context of B2B,B2C and C2C. Therefore our trust management framework can instruct the trust theory research. Moreover, the framework also has some reference values on concrete engineering e-commerce trust system designing.2. This dissertation makes analysis on the key factors influencing the trustworthiness of PKI and points out that a secure way of accessing and storing the users' private keys is very essential for ensuring the whole PKI system to be trustworthy. After some conclusions drew on several common used private key management methods, a secure private key management mechanism based on Guillou-Quisquater (GQ) identification scheme is presented. Our mechanism can not only corroborate the identity of a private key owner, but enhance the confidentiality of private key storage as well. In terms of the security and efficiency analyses, it seems that our mechanism can guarantee the confidence of private key storing and effectively save the network bandwidth in entity identity authentication process.3. This dissertation makes analysis on the specialties of PKI trust models, especially makes a thorough study on the hierarchy trust model. In order to describe the problem clearly, first we formalize some essential concepts and methods in hierarchy trust model. Based on it, we focus our attentions on two special application environments of B2B. One of the contexts is when consolidation or combine of different companies happens, the multiple PKIs deployed by different companies should be reconstructed into a new one. The other is once the enterprise...