Studies On Identity Authentication Technology In E-commerce

The identity authentication technology among the E-commerce security technologies is the research object in this paper. Firstly, the demand of E-commerce security is analyzed. Based on analyzing the demand of E-commerce security, many kinds of security technologies in the E-commerce are introduced. At the same time, the identity authentication technology is studied. Secondly, four existed trust models are analyzed. Combining agent technology, a new trust model, which is based on agent, is proposed. This new trust model can not only solve the mutual authentication among the independent trust domains, but also reduce the complexity of certification path, and ensure the security during the deal of E-commerce as well. Finally, the Kerberos protocol is analyzed and its limitation is pointed out. Combined with the smartcard technology and using a nonce produced by the smartcard instead of timestamp, a new protocol based on smartcard is put forward. Compared with the original protocol, the new one can solve the problems of password wiretapping and timepiece synchronization, which can protect users'secret information better. Through analysis of BAN logic, the security of the new protocol is proved.