Online Fund Settlement System Security Agent Research And Design

With the swift and violent development of the economy of our country and promotion of structural adjustment of economic system, a lot of non-banking financial institutions and large-scale groups of enterprises and institutions of the non-financial institutions have all set up inside the settlement system of the fund and system of clearing. The setting-up of the fund network system, can reduce the fund in transit, accelerate the turnover of the fund, can strengthen the centralized management of the fund, improve the service efficiency of the fund, ensure the security of the fund, have met the requisition for management of the fund in the course of moving towards the market of large-scale enterprises and institutions.Enterprise online fund close system to close at the special-purpose foundation of network in above-mentioned enterprise fund, adopt advanced Internet, Intranet and network safe practice, such traditional financial service as the counter, self-service site, etc. will be expanded to Internet, Intranet on the basis of opening, enable its customer to receive the financial service that the settlement organization of the fund offer whenever and wherever possible. Is it serve before putting online fund into operation really to close, it is need to consider the security mechanism of the Web service.People having proposed all sorts of solutions to safe problem, among them many use SSL/TSL agreement to finish the scheme that information is transmitted safely, these schemes are restricted by length of key, and lack undeniable ability, it is difficult to meet online fund to close the need with safe system. So, the study on safe problem while settling account of the online fund is very essential. Combining the basic theories in SSL agreement and PKI technology, this text has put forward safe design plan of closing system of the online fund of realizing by acting as security proxy. This scheme has realized the security transmission between Web server and browser, and have the following characteristics:It is apt to combine the hardware key certificate equipment and application of the interface.Choose the signature of important information to be kept for a long time, in order to be regarded as the legal evidence in the future. It is easy to choose information to sign and encrypt, improve processing speeds.Connect with the security proxy, systematic network structure is more flexible.First of all, the thesis analysis the business and security demand of the Settlementof the online fund, and analysis the defect of SSL agreement and SET agreement while realizing a security proxy. Have studied the relevant technology of PK.I, Have compared the quality that the hardware is encrypted and the software encrypt, a section of possibility used in acting as security proxy that have analysis that hides words in HTML language, have put forward and adopted technology of PKI, the encryption of the hardware and HTTP agreement to deal with the Settlement of the online fund and close the scheme that the system acts as security proxy, have designed the security proxy's system structure and function of every module. Make the security proxy have figures to sign, identity authentication, encrypt, integrality function. Proved to the function of acting as security proxy safely finally.