Usage Of PKI Based Authentication In Barter Trader System

With the rapid development of Internet, more and more traditional commerce are implemented as Electronic Commerce. The authentication has become a predominant problem in the Electronic Commerce. As an integrated set of Internet security solution, public key infrastructure has been formed the kernel of information security technology. In addition, it becomes the critical and basic technology of electronic commerce. From the requirements of network information security, based on PKI asymmetric encryption and combining with the technologies of digital signature, identity authentication, and digital certificate, the system of identity authentication based on USB key is created and used in practical applications with good result.The barter trader e-commerce platform integrates the traditional barter trader business process with the computer technology. There are large amount of identities in the system, but as for the complex trader rules, users in system should have restrict rules to get the information about the customer, product and business. By deeply analysis, The PKI authentication is proved to be useful in solving these problems. Above all, work has been done are as follows:1. Analysis the authentication demand in barter trader system deeply, and give out the solution based on the theory foundation and existing technology. Implement the business process of the barter trader with authentication and discussed the technical problems and improvement suggestions.2. During the Implementation of authentication in barter trader system, the architecture of barter system is EJB3 while the authentication technical are complex. It includes the driver of digital certificate both in client and server, and different plug-in components in client. So combine these technical together is a major breakthrough.Moreover, innovation in this article can be summed up as:we use the digital certificate and technology provided by Shanghai CA which is the lead CA center in china. So our design and implementation can reflect the problem exist and the improvement direction of our country's PKI authentication.