The Design And Implementation Of An Online Shopping System Based On PKI

Based on online shopping system, companies can afford quickly and steady market information and provide reliable real-time services for customers. E-commerce system is an important network platform through which users can trade with the companies. Because of the opening characteristic and the complexity of the Internet, business online becomes much more risky. Security technologies, such as authorize, authentication, encryption, integrity checkout, information audit and authenticity, must be implemented to ensure the security of the transactions.An online shopping system based on PKI is designed and implemented in this thesis aiming at the safety of the e-commerce system. A stand-alone CA system is developed, and based on CA and SSL secure communicated technology, customized encrypt communicated channel on the public network channel is setup, implementing secure transfer data on the insecurity channel and ensuring secret and integrality of the information when transferred on the Internet.The security threads of the e-commerce platform at present are analyzed firstly in this thesis. Then a secure e-commerce platform based on PKI and a CA system are designed and implemented. Some security technologies such as access control, authority management, key security management and digital watermark log are adopted to ensure the security of the CA. A improvement strategy aiming at the application limitation of SSL in e-commerce service is also presented. The strategy reconstructs SSL itself by increasing digital signature in order to prevent denying and get over the limitation of SSL identity authentication. The SSL security communication module of the online shopping system is then implemented, and some proper encrypt algorithms are chosen to enhance the encrypt degree of the WINDOWS system. Following the concept of security factor must be considered firstly before the system design, based on the network platform which has close CA and independence SSL secure communication module a secure online shopping system based on PKI is designed and implemented.