電子商務(wù)支付系統(tǒng)的安全研究

全文44頁 約24000字 論述翔實(shí)

Research and Development on the Security of E-Payment System

摘要：本文介紹了電子商務(wù)支付系統(tǒng)的概念、分類、基本框架信息流程及相應(yīng)的安全技術(shù)，并詳細(xì)介紹了這些常見的支付協(xié)議、系統(tǒng)模型，原理及應(yīng)用，最后，本文在結(jié)合運(yùn)用SSL與SET的基礎(chǔ)上，提出了一種可行的安全方案，并編程模擬實(shí)現(xiàn)了一個(gè)完整的電子商務(wù)系統(tǒng)。

關(guān)鍵詞：安全支付,網(wǎng)上銀行,SET,SSL,身份認(rèn)證,數(shù)字簽名

ABSTRACT
With the development of Internet and the growth of E-Commerce, as one of the key activities of most commercial transactions, the role of secure and economical on-line payment on the Internet will, accordingly become more important. Providing customers with a secure way to buy goods over unsecured networks is a great challenge. In this research, we focus on the E-payment methods and security.
We first introduce the concepts of E-Commerce & E-Payment System, the security requirement of them, the history and the progress.
Comparing the commonality of E-Payment systems and the existing currency payment system, this thesis classified E-Payment systems: On-Line Credit Card Payment; Electronic Cash; Electronic Check; SmartCard(IC); and Micropayments etc.
The thesis explored the advantages and drawbacks of each major E-Payment systems; analyzed the applicable environment, also it is concerned with the specially condition of China, the special payment systems.
SET&SSL, the most common used methods now, are promising standard protocols that provide a way for customers to use their payment card over the Internet securely and confidently. The thesis presents the security mechanisms of them, and simulation models are used to make it clear.
At last, it proposes a solution method based on the SET&SSL protocol, and realizes it by developing a virtue E-Commerce system.


Key words: E-Payment E-Banking On-Line Credit Card Payment SET SSL

部分參考文獻(xiàn)

[5] 蔡小虎,錢世德. 關(guān)于電子商務(wù)兩大基本協(xié)議---SSL 和 SET的對(duì)比與分析,第十四次全國(guó)計(jì)算機(jī)安全學(xué)術(shù)交流會(huì), 2001, 3.

[6] Paul-André Pays，F(xiàn)abrice de Comarmond. An Intermediation and Payment System Technology, Sept. 2000

[7] 沈曉平. 電子商務(wù)的安全支付標(biāo)準(zhǔn), 中國(guó)標(biāo)準(zhǔn)化(CAS), 2001, (8)

[8] 何寶宏, 中國(guó)特色的電子商務(wù)，第六屆中國(guó)國(guó)際電子商務(wù)大會(huì)，2002, 4.

[9] Jim Miller (W3C / MIT). Payment & Security, 4th ACM Conference on Computer and sCommunications Security, Zurich, April 1997.

[10] Mark Berman、Glenn Scott、Caesar Samsi , Worldwide Technical Services Develpment Assets , Microsoft E_Commerce Solutions, April 1999