Study On Security Encryption Technology Of Networks-Based E-Commerce Systems

With the development of Internet,the E-commerce leading the third revolution on human community following on industrial and agriculture revolution has made a full impact on the idea and fashion about commerce. As people enjoyed the opening and sharing of network,they were also distressed about the problem of security.This paper mainly studies the security encryption technology of networks- based E-commerce systems. It analyzes the message encryption and digital signature process of client browser ,and the message decryption and validation of merchant server in a integrated E-commerce system,and it also provides an application example.This paper is divided into five parts:Chapter 1 illustrates the origin,purpose,content,meaning of this project and some key problems and key technologies discussed in paper. In addition,it discussed the main security product in E-commerce payment system:SSL(Secure Socket Layer)protocol and SET(Secure Electronic Transaction)protocol and analyzes their security vulnerabilities.Chapter 2 clarifies the cryptographical foundation of E-commerce system. It mainly introduces a hybrid cryptosystem using RC2 and RSA algorithm in our application and some message hash function producing message digest provided by MS CA(Microsoft Certificate Authority) such as SHA-1,MD4 and MD5.Chapter 3 gives detail description of a new security infrastructure-PKI. It explains the basic framework,function,capability and basic character of PKI. At last,it analyzes the four kind of PKI's trust models.Chapter 4 will study and analyze the whole scheme of our system implementation. It mainly analyzes the system's scope physical structure system roles and the relationship between the system roles. It also analyzes the functional view and the technologies adopted to realize it. At last,it introduces the operating system and development tool of this applicationsystem.The last chapter detailedly analyzes the high level design of our application system. This part includes the following contents:the design of two web servers;the design of two databases;the application and preservation of digital certificate;how to find an appointed certificate;the implementation of MS PKI-based message encryption and signature of client;the implementation of MS PKI-based message decryption and validation of merchant.This project is supported by Nature Science Foundation of Hubei Province.