Analysis And Research On Identity Certification In Electronic Commerce

Electronic commerce is an important component of national economy and information society. The security including identity certification and security transmission of trade information is the most crucial and most important factor in all electronic trade system links. At present, signature and encrypt technology based on PKI security system and taked CA as the core is adequate mature to make electronic trade safer. It makes information delivered privacy, integrity, validity and undeniable.Our country has established many CAs now but still has many problems to resolve. There are obvious differences in profession, regions and system structure. Therefor, CAs are in partition mutually and become trust isolated islands. With the development of EC and EG, certification conflict from customers of different CAs will appear necessarily and certification will certainly become the bottleneck. Interoperation provides a method. It makes relations between CAs so that their customers can carry on certification directly. The paper aims at the research of the PKI areas'connection, begins from cross-certification, re-programs CAs in interoperation and puts forward suggestions to resolve our country's interoperation problems.The paper analyzes the characteristic and apply scope of PKI basic trust models and interoperation models, puts forward cross-certification model using agent mechanism to relieve the complexity of finding certificate paths in cross-network trust model, discusses and analyzes the path construction algorithm by VB. Finally, it puts forward the frame of PKI that fits our country on the analysis of the condition abroad and in.Through the research, the paper gets the following conclusions:1. A agent-based cross-certification model is put forward, using sub-structure path construction method resolves the problem of complexity in cross-network certification model.2. A detailed description of the agent's working principle and function is given.3. The paper improves the BFS algorithm using multipath ideas and gives strategies to raise efficiency by certificate filter, directory attributes, construction directions, priorities and other aspects.4. The paper gives suggestions for China's PKI architecture by using agent-based cross- certification model and BCA.The agent-based cross- certification model provides a new method for the connection of PKI areas. The connection will make wider relations between CAs so that customers can certify each other , CAs will be more efficiency ,the process of certification will be simplified and the security and validity will be furthered. All of this can provide a safer environment for the development of EC.