Research Of Electronic Commerce Security Protocols And Simulation Of B2C Trade System

With the rapid prevalence and wide applications of electronic information technology, electronic commerce is receiving more and more recognitions from the society with its advantages of being swift and convenient. However, dut to its distributed and open nature, security problems become an important influence on the development of E-Commerce.This thesis presents a systematic reaserch on the security architectrue of electronic commerce and expatiates on its net layer, encryption layer, authentication layer, security protocol layer and application layer. Then the thesis analyzes the structure and practice rule of SSL. Handshake and record protocol process is the keystone. The security performance is discussed from the aspects of key management and identity authentication, and the security limitations are pointed out. SSL security agent is proposed as a solution to these limitations. As for the data and rule of SET, the process of register application and dual signature is formally modeled and specified by the analysis tool Petri nets, and some key technologies, such as symmetrical and dissymmetrical cryptography, messege digest, digital signature and digital envelope, are involved in the process.On the basis of theory research,this thesis simulates a B2C electronic trade system based on SSL. The simulation includes the design and development of merchant system (foreground shopping website and backgroud managment platform), the third-party payment platform and the payment gateway of the bank. Security mechanisms like http signature and notify verification are adopted in the third-party payment platform and the platform provides services through service interface and notification interface.