现有电子交易系统的安全缺陷及其对策研究

The Security Defects of Current Electronic Transaction System and Countermeasures

针对目前在线电子交易系统存在的诸多安全问题,从分析发现的攻击迹象表明目前典型的网上转帐交易存在明显的安全漏洞,利用该漏洞可以很容易破坏在线电子交易所要保证的身份真实性和交易内容的真实性。针对产生攻击路径的根源,在原交易流程中引入物理安全信道,提高用户的可参与性。分析表明,当前的OCL技术能够有效防止上述安全漏洞,确保在线电子交易系统的身份真实性和内容真实性。

In allusion to the security problems in current electronic transaction system,this article puts forwards that there exist obvious security loopholes in the current typical electronic transaction system.By use of the existing loopholes,the attackers can easily destroy the reality of identity and transaction of on-line electronic transaction system.The analysis shows that the current OCL technology can effectively prevent the above mentioned breaches and guarantee the reality of identity and content of on-lin...