Online Bidding System, Security System Design And Development

With the development of the Internet, the Electronic Business develops rapidly. The security, which is the key factor to the development of the Electronic Business, is becoming more and more important.This paper presents my work on the design and implementation of the security institution of the Electronic Tendering System.The contents are:(1) The background, source and goal of the research.(2) The definition, frame and security of the Electronic Business. Emphasis is put on the latter.(3) The encrypting technology. It is the core technology on assuring information safe that other technologies are based on. Here the foundation of the cryptology, symmetrical encrypting system, unsymmetrical encrypting system and the prospect of the cryptology are introduced.(4) The PKI (Public Key lnfrastructure)/CA (Certificate Authority) frame. The PKI/CA supports authentication, confidentiality, integrality and undeniablilty. Based on SSL (Secure Socket Lay) protocol, the PKI/CA combines the symmetrical encrypting technology and unsymmetrical encrypting technology and provides a frame for the implementation of the security.(5) The whole goal, operation flow, hiberarchy, functions, design scheme and development environment of the Electronic Tendering System.(6) The design and implementation of the security sub-system in the Electronic Tendering System. This chapter describes how a certain PKI/CA system is implemented, including the requirement analysis, the safety scheme design, the using of the certificates, the client safety, the server safety and the security at the time of unsealing the bidding files.As an important member in this project group, I am in charge of the design and implementation of the security of the whole system. The security implementation of this system is based on PKI/CA. The PKI/CA frame realizes the creating, storing, issuing, recalling certificates so as to provide data integrity and identity authentication for the system.In addition, applied security is closely related to the user's requirement and the environment. Each system has special safety requirements, so does theElectronic Tendering System. We introduce a new concept in this system-Project Certificate because of the sensitivity of the bidding files. The Project Certificate is requested by the tenderee and created by CA according to the tendering project. The bidders doubly encrypt the bidding files with the Project Certificate and the Server Certificate so that both tenderee and server can't open the bidding files before the unsealing moment. This step assures the bidding files safe so as to enable the tendering work to go on wheels.Liu Weiwei (Computer Science and Application) Directed by Prof. Cheng Jingyun...