Research On Multi Database Environment Electronic Commerce Information Security Technology

Multi database system is heterogeneous, distributed, autonomous, data stored in the distributed data and share other characteristics of a wide range, safe storage of sensitive information in the database is very important; and e-commerce platform in the authentication between the client and the server and the data in the transmission process of security issues also need to further study; and multiple data environment of e-commerce platform in the data access security between enterprises should get attention.This subject comes from a oriented clothing sales of small and micro enterprises Invoicing and inventory management platform. The platform uses SaaS (software as a service) model, for enterprises to provide a set of application software, each enterprise have their own database management system, every database management system with a table space, each table space are stored in the affiliated enterprise data. Needs of enterprise user and server mutual authentication, the sensitive information is encrypted storage and use security protocol to transmit sensitive information, from the application level, guaranteed the e-commerce transactions of confidentiality, integrity, authentication and non repudiation. On the basis of the security of the transaction also needs to be carried out between the enterprise data security, to ensure that enterprise data can not be illegally accessed by other companies.The set and SSL security protocol to ensure data confidentiality, integrity, authentication and non repudiation; specifically, is to use CA authentication to ensure the authentication between the client and the server, the digital signature technology to ensure transaction process of non repudiation and encryption technology to protect the confidentiality of transaction data, the digital technology ensure the integrity of the transaction data. Electronic commerce platform for multi database environment, can use CA authentication and database routing mechanism to ensure the security of data access between enterprises.Through analysis and research, the thesis decides multi database environment of electronic commerce information security solutions, the scheme using CA authentication platform level to achieve mutual authentication between the server and enterprise; using SSL protocol to realize the network transmission security between the client from the server; combined CA authentication and data routing mechanism to achieve between enterprises data access security; using AES symmetric encryption algorithm to achieve the sensitive company data encryption storage; completes the system role and privilege management subsystem and on this basis to verify the feasibility of design scheme and enough to provide security for enterprises SaaS applications.