基于PKI的电子商务安全框架

Security Framework of E-Commerce Based on PKI

随着网络的普及与发展,电子商务近来受到越来越多的关注与研究。从最初的EDI,到最近的BizTalk,SET,人们提出了很多的电子商务框架。但是这些框架有的在安全方面不作考虑(如EDI只是定义了传送格式,而不考虑安全)或考虑不全面;有的则只致力于电子商务某一特定的方面(如SET只是为信用卡支付而设计的协议)。分析电子商务的主要参与对象,形式及流程着手,提出一个基于PKI的电子商务安全框架,并着重对其中的安全技术进行分析。该方案可以为电子商务应用程序的安全研究提供方向与方法的指导。

With the development of network, e-commerce is appealing more and more attention. From the uppermost EDI to the latest BizTalk and SET, people proposed quite a few e-commerce frameworks. Among these frameworks, some don't take security into account or don't consider a lot (eg. EDI only defines the transfer format, not considers the protocol), while others only commit themselves to one part of e-commerce (eg. SET is designed only for e-payment protocol for credit card). We began from analyzing the participants, formats and workflows, and proposed a security framework of e-commerce based on PKI and analyzed the security technologies. The proposed framework can provide guidance to the research of e-commerce.