The Design And Implementation Of A Secure Electronic Contract Platform Based On PKI Technology

With the rapid development of Internet technology,the electronic commerce has become an intelligent way for contract signing parties to getting attention.In recent years,relevant legislation has been enacted to standardize and promote electronic commerce activities.For most enterprises,while enjoying the convenience and efficiency brought about by electronic commerce,it is necessary to avoid legal risks as much as possible and meet the relevant requirement of the "Contract Law of the People's Republic of China","Electronic signature law of the People's Republic of China",etc.The electronic contract is through computer networks.The entire process of signing need to cooperate with digital seal systems,timestamp services,and tamper-proof technologies are used to ensure the security of the signing process.This paper proposes a design and implementation of a secure electronic contract platform based on PKI technology,which ignore the factors such as the different levels of informationization,different business models and other factors of the parties to the contract,and seize the commonality of transactions.The electronic contract provides a secure electronic signature verification service to ensure the authenticity and non-repudiation of the contract signer's identity and ensure that the contract content is not tampered with,thereby ensuring the rights and interests of the parties to the transaction.At the same time,the electronic contract platform adopts a plan to provide the same level of information security protection for banks and financial institutions.According to the "Information Security Technology-Implementation guide for classified protection of information system" and the "Information security technology-Technical requirements of security design for information system class ified protection",set up information system maintenance and maintenance personnel access control policy,set up a security domain boundary between security mechanisms such as access control policy.This paper proposes a comprehensive security technical scheme and service model different from the traditional electronic contract platform.