A Both Bb And Bc E-commerce Security Model And Its Application In Actual Cases

The security requirements of e-commerce on the layers of the business transaction security are manifested as confidentiality and integrity, authentication and non-repudiation requirements for the payment process.This thesis focuses on the research about security problems on B2B and B2C. Three-layers frame structure of the e-commerce system are analyzed, especially in the business transaction security level for its safety technology and safety requirements.In the business secure transaction layer, Secure Electronic Transaction (SET) protocol has been widely used in Europe and the United States. SET protocol builds a set of criterias for the process messages between cardholders, merchants, banks, certification and payment gateway.SET protocol itself is very complicated and requires installation of the appropriate software. However since SET can meet the security needs of the e-commerce payment process, so that it would be a good choice for the company who pays attention to the secrets of trades and account information of credit cards.This thesis introduces a simulated commercial companies S2L which I learned in Belgium, analyzes the business model of the company and applys the traditional SET protocol on the payment process of S2L. Besides, the thesis analyzes each step of the protocol in a formulary way, especially on the basis techniques of digital signature, double signature, etc.Then, for security threats S2L facing to, this thesis make some modification for the conventional e-commerce payment models. Based on the modifed model of SET protocol, each steps for the modifed model in the transaction of payment with illustrations in S2L is described.At the end, this thesis introduces the extended logic, Kailar logic and uses this logic to analyze and prove successfully the improvement of new SET protocol made in tracing and atomic.