Secure Electronic Payment Model

Electronic Payment is the most important part of the Electronic Business system, and its security must be ensured. With the development of Electronic Payment, the system that based on TLS/WTLS and SET protocols at present could not meet existing demand. It has new research issue to build secure and efficient Electronic Payment. We propose an approach combining the TLS/WTLS and SET protocols STSEP(SET and TLS-based Security Electronic Payment), and a novel payment protocol STPP(SET and TLS-based Payment Protocol).STSEP is composed of four components: Payment Gateway, Electronic Store, Financial Institute and Customs. Payment Gateway is in charge of authority and payment of credit card. Financial Institute does with building account for Electronic Store and Customs and authority of credit card. Electronic Store provides electronic commodities for Customs.STSEP is different with SET lies in two factors taking account of security and usability: one is the Payment Gateway that is composed of three components: payment front, encrypt servers and database. Multiple encrypt servers share one database, and payment front only transmits data, and encrypt servers deal with encrypting data; another is the Middleware which in the Ethernet of Electronic Store dealing with communication between Electronic Store and Payment Gateway.We design STPP according to TLS/WTLS and SET protocols. A simulation payment process has been built for the proposed architecture to analyze its security and performance. Such analyses have been proved to be secure by Kailar logic.Through the theory analysis and model design, we propose the mechanism to guarantee the security and efficiency and confirm that STSEP has favorable security, usable and scalable, therefore, it may enjoy the wide usage among the next-generation Electronic Payment system.