Design And Realization Of Online-Bank Based On The Public Key Infrastructure

In today’s society, with the rapid development of computer technology andmodern communication technology, a new electronic channel business–"Internetbanking" in financial industry comes into the world. The most concerned problem ishow to ensure the reliability and security of the Internet banking transaction for thebanks and users.This paper is based on the intensive study of related theories and principles ofPKI and other Internet banks, also their mechanisms and key technologies. Combiningwith PKI technology and advanced encryption algorithm at home and abroad,according to the practical application of Internet banking is to achieve the Internetbanking system with practical value based on PKI which improves and optimizes thedesign of security system for Internet banks on data transmission security andprocedure of user authentication. They can enhance the security and defensecapability of Internet banks. The main wok of this paper includes:First, studying related security technology of this subject, combining with PKItechnology, the CA authentication techniques, encryption algorithm selection, tradingsystem communication handshake protocol analysis, and other technologies such asSSL and digital certificates brings program for improving application with PKItechnology on Internet banking website.Then, this paper also proposes a prototype system for the Internet bankingsystem based on PKI technology. Through selecting the CFCA as online banking CAand symmetric encryption key mechanism for user information and transactioninformation on online banking and encryption and decryption for asymmetric keymechanism, message authentication, digital signatures and other security controls,realizes access control service for online transmission process of transactioninformation, also security service, integrity service for data, and security service andnon-repudiation services for authentication. They solve the happening of transmissioninterception and tampering of data and impersonation and behavior repudiation. Thesystem adds the management for online banking user and bank managers fortransaction records instead of increasing the operating complexity of users,effectively improving the security of online transactions and safeguarding rights andinterests for the users of online banking. Afterwards, we can realize detailed functional modules of the site according tothe proposed PKI-based online banking site model. The system mainly includes usermanagement, trading business, business inquiries and certification center. Afterintegrated test for the system, we can see it’s feasible to have the online bankingwebsite system model based on PKI technology. The system can run properly and thework efficiency and security meet the design requirements. This system is an effectivereference for the future development of online banking.