Research Of E-Commerce Security System Based On Web Services

Nowadays the Electronic Commerce brings the new attempts and convenience for work and life of people, but the security of EC become the obstacle of EC's development.In the study of EC's security, the Secure Electronic Transaction protocol came to the world, which was designed for electronic payment. The SET protocol involved much of data and strictly limited the format of data; therefore it was very cockamamie and inflexible. However, the XML, as the basic of Web Services, is a flexible technology of data processing. It has the structured and expansible characteristics, which is suitable to conduct the complex and anomalous data.In this paper, firstly, it presents the basic knowledge of XML, Web Services and the architecture of Web Services based on XML, makes researches on some present secure recommendations of Web Services based on XML. These security recommendations include XML-Signature recommendation, XML-Encryption recommendation, and WS-Security recommendation. Making researches on SET Protocol's payment model and payment flow. Making researches on EC security system's architecture of security, structure of payment system and payment message flow. And then this paper show the formal description about the payment message flow. Based on these researches, it implements a B2B EC web application following the recommendations of Web Services. After that, using the technology of signature and encryption about SOAP Message, according the thought of SET protocol, it implements a payment system based on Web Services. The EC secutiry system can assure EC's security, it is more convenient than SET, and it also have the characteristic of XML's structure data processing and extendable.