一种可信的网上银行认证协议的分析与设计

Analysis and design of trusted online banking authentication protocol

随着电子支付的普及,安全问题成为了影响其发展的关键问题之一。可信计算平台、PKI认证系统都是保证安全的有效机制。在分析这两种安全机制的基础上,提出了一种结合可信平台和PKI认证系统的网上银行认证协议,通过可信平台模块TPM保证了参与方的计算平台可信性,使用PKI系统和智能卡对银行、持卡人、读卡器进行了身份认证,完成了认证过程,达到安全可信的认证目的。

With the popularization of e-payment, security has become one of the key problems for the development of e-payment. Trusted computing platform and PKI authentication system are both effective mechanisms to ensure security.This paper presents the two mechanisms and proposes an authentication protocol for online banking combining the two mechanisms.For the purpose of security and trust this protocol uses TPM to guarantee the trustworthiness of all parts＇ computing platforms, uses PKI system and smartcard to authenticate the identities of bank, customer,card reader.