The Design And Implementation Of An Actual E - Commerce System

With the rapid development of the computer and the Internet, Internet based e-commerce is also explosively developing. E-commerce, being efficient and cheap, has become the main mode and development tendency of future commerce. With great development potentiality, e-commerce will be the main impetus of Chinese economics.As e-commerce develops, the security problem arising in e-commerce applications is becoming increasingly serious, and a main barrier in e-commerce implementing. E-commerce security has become an important subject in e-commerce research. This dissertation summarizes the design and implementation of a practical e-commerce system. Starting from analyzing the necessary functions that the practical e-commerce system should have, we analyze the security requirements of the e-commerce system. We utilize access control, data encryption, identification and privacy preserving technology to guarantee the system security. Applying suitable programming language, we implement the corresponding secure functionality, and guarantee the system security. The main work we do in designing the system is as follows:(1) According to the security requirements, we analyze the reason why the role-based access control theory is chosen as the research object, and then analyzes the authorization model of Static Separation of Duty and Dynamic Separation of Duty in detail. We design a more secure access control policy for users to realize the secure distribution of the database user permissions.(2) Aiming at improving the efficiency of public encryption operation in e-commerce, we propose a fast algorithm to realize the module operation of big integers. This algorithm can greatly reduce the computational complexity of large integer module operation. Our system proves that the new algorithm is reasonable and efficient. The algorithm can improve the efficiency of the encryption algorithm, and plays an important role in the performance of data encryption.(3) For secure data sorting problem in e-commerce, we design a scheme in the semi-honest model to privately compare two integers, and then using homomorphic encryption and divide-and-conquer methodology, propose a privacy preserving sorting protocol. We also prove its correctness and security.