Design And Application Of PKI In Verifying Identities And Encrypting In The Internet Banking

With the development of communication and computer technology, new financial businesses based on various types of electronic channels have emerged. Internet Banking plays a more and more importsnt role in people's live, so that people have higher requirement for Internet Banking. For the banks and users, the current greatest concern is how to ensure the security of Internet Banking. The paper researches how to ensure the security of Internet Banking.First of all, the paper integrates the current two different kinds of modes including channel encryption and user login that used in Internet Banking System, advances the Internet Banking System designing model that make use of integration one-way and two-way SSL based on PKI technology. The paper creates different levels of security mechanisms according to the risk level of Internet banking business, so that different business corresponds with the appropriate security mechanism. The business is classified into two kinds of risk levels, one only can deal with searching business, and the other can modify the database. These two types of business run by two servers, establishing communications channels with one-way SSL and two-way SSL respectively. At the same time, the core system monitors the actions of the two servers according to servers'different permissions, which will improve the internal security of Internet Banking System.Secondly, the paper advances a design of anti-screenshot virtual keyboard, solving the problem that Trojan horse takes use of screenshot to steal the Internet Banking user's account and password while using traditional virtual keyboard. The main points are: protecting the data showed on the screen when mouse is moving and clicking; realigning virtual keyboard order and keeping inputting efficiency of users after mouse is clicking. By system testing, the Internet Banking System designing model that make use of integration one-way and two-way SSL based on PKI technology advanced by the article is feasible. The designing have completed database designing, ActiveX and switching between two systems, and making a new reference for the Internet Banking System in the future.