| Network banks plays an important role in e-Commerce. In this paper at first our country network bank's development current situation and the its security situation are presented. Then, analyzed the security threats which the present network bank operational channel faced from the identity authentication security, the data security and the trust security, elaborated the status authentication technology and the data transmission encryption technology principle. Finally, base on the PKI (Public Key Infrastructure) technology, and by employing identification authentication, data transfer encryption, digital signature, and so on, the overall security scheme is designed to satisfy the commercial network bank operational system's security requirements. The designed network bank consists of three components, the application endpoints, the application gateways, and the communication interfaces, to support user authentication, data transport security, and non-reputation, the operation environment includes network bank system host, the client browsers, and the main transaction servers. To implement the overall scheme, some suggestion is given for the selecting types of some concrete products. |