Payment Systems, Internet-based E-commerce Security

With the development of information and network technology, we are entering into a information society,which is symbolized with networks. The E-business based on Internet is becoming the up-to-date mode of modern international commerce. More and more corporations, governments and consumers do their business affairs through Internet. The characteristics of Internet, such as convenience and easy to use at any time and anywhere , offer good technology support to the alternation, communation and treatment with low cost of the E-business's Information flow, business flow and substance flow from different areas and different time, but in order to integrate the low cost, high efficiency and individuation of the E-business as a whole, the financing flow must be dealt with through the network fast and automatedly. The seizing up of the financing flow, which is based on internet payment, will counteract the development of E-business directly. Internet payment has become the bottle-neck of blocking the development of E-business.The shortcut, convenience, credibility and security during the payment, in particular the security of hypersensitive information of financing flow, are primary concerned by bankers, employers and clients. An investigation made by a research institution of a university shows, that more than 60 percents of the 23,000 Internet users would not like to pay through the network because of worrying about the security of E-business. Now, a lot of countries, including China, are paying much more attention to study the application and popularization of internet payment.Firstly, this paper analyzes the existing system of internet payment and its characteristics, studies and discusses the security technology to realize internet payment . Secondly, the paper analyzes and studies the protocol of SET and SSL, the flow of paying through credit card in detail and found out their scarcity and security bug. Finally, combining the strongpoint of SET protocol and SSL protocol, this paper puts forward a designing project of safely paying model, which is paid through bank-card and is authenticated by CFCA, and implements the DES encrypt arithmetic through C++.This paper mainly works on the following several aspects:(1) It Analyzes and discusses the existing system of internet payment, and points out its strongpoint and shortcoming. Credit card (bank card) is the mostly prevalence way of paying presently.(2) It studies several main kinds of security technologies used on the system of web payment, such as the encryption techniques, authentication techniques and the system of PKI. Discusses the principles and characteristics of DES arithmetic and RSA arithmetic in detail. Also it analyzes how to apply the encryption techniques of public key to internet payment system, points out its shortcoming and put forward the improve measurement.(3) It analyzes roundly about the SET protocol, SSL protocol and the paying model through credit card based on SET protocol and SSL protocol, points out the security problem on both of them and comparing the security performance between the two protocols. It also puts forward the improve measurement in SET transaction flow .banking-card. This project is authenticated by CFCA, which configures the digital certificate for each side on the trade. This paper also makes use of techniques of security agent, which can use SSL protocol and SPKM protocol flexibly between two types of agent software. This model can fit not only the B2B E-business system but also the B2C E-business system.(6) It implements the DES encrypt arithmetic through C++.