Study On Authentication And Secure Trade Technologies Of Networks-based E-commerce Systems

Electronic Commerce is a modern enterprise business fashion in United States and other developed country in early 1990's, which is a fresh means to develop all kinds of commerce activity rapidly and efficiently by the technology of networks. Though E-Commerce affords facilities for people, but it also brings the problem of security.This paper mainly studies the authentication and secure trade technologies of networks-based E-Commerce systems. It analyzes the relation of authentication center, merchant and client, discusses the defrayment problem of E-commerce and puts forward a better scheme. Then it makes use of the technology of PKI ,user certificate, identity authentication, digital signature, SSL and Java to realize a secure E-commerce system.This paper is divided into seven parts.:Chapter 1 introduces the origin, purpose of the project and analyzes the development status of the secure E-Commerce systems.Chapter 2 clarifies the cryptographical foundation, which includes the symmetrical cipher technology, unsymmetrical cipher technology and digital envelope .It also analyzes the DES and RSA algorithm.Chapter 3 dissertates the structure, trust model, security performance and development of PKI, then discusses the correlated technologies of PKI which includes message digest, digital signature, digital time stamp, digital certificate, SSL (Secure Socket Layer), SET (Secure Electronic Transaction) and IPSec (Internet Protocol Security) protocol.Chapter 4 introduces the defrayment system of E-commerce and analyzes several digital defrayment fashions, such as credit card, electronic cash, electronic check and micropayment. At last brings forward a scheme of defer defrayment of electronic check.Chapter 5 studies the whole scheme of the system implement. It mainly analyzes the system's scope, research object , system flow and system function.Chapter 6 introduces the operating system and technology of this application system: including Java ,JSP/Servlet, SQL Server, Resin , MS PKI etc.Chapter 7 gives detail description of the design and realization of our application system.1) The authentication subsystem which includes the establishment and operation of authentication center, the application, grant, query, and setting of merchant and client certificate.2) Internet shop subsystem which includes secure connection of client and merchant, user enrollment, entrance, commodity display, shopping, and merchant database.3) Client subsystem which includes client sending electronic check based on digital signature and encryption.This project has practical values and is supported by Nature Science Foundation of Hubei Province (2000J154).