2018电子商务网站的安全设计

3771172

电子商务网站的安全设计摘要：随着 Internet 的日益普及和高速发展，电子商务也得到了迅速发展。作为电子商务重要组成部分的安全电子支付越来越成为人们关注的焦点。本文对信息安全技术在电子支付中的应用进行了分析和研究。 本文首先阐述了电子商务的发展、特点、内容、作用以及电子支付在电子商务中的重要地位。然后讨论了电子支付的概念、一般模型、方式、分类及安全需求，并介绍了防火墙技术、VPN 技术、密码技术以及 SSL 协议、SET 协议等与电子支付密切相关的信息安全技术。接着详细介绍了本文的主要研究工作：①研究了网络通信安全协议 SSL 以及用于电子交易的 SET 协议，详细分析了它们各自的特点、安全特性、交易流程以及优缺点，并对两种协议进行了分析和比较。②在充分理解 Payword 微支付协议的基础上对其进行了一定的改进，使其更适合于 WWW 环境，同原有的协议相比更实用，安全性和公平性更高，而对系统整体性能没有影响。同时，对进一步扩展和改进 PayWord 协议提出了一些建议。最后论文对研究工作进行了全面的总结，并对今后的研究方向进行了展望。关键词：电子商务；电子支付；数字现金；微支付；密码技术Security Design of e-commerce WebsiteABSTRACT：With the increasing popularization and rapid development of the Internet, electronic commerce has also developed quickly. As the important part of electronic commerce, secure electronic payment has become the focus of more and more people. This paper analyzes and studies the applications of information secure technology in electronic payment. At first, the development, characteristic, content, effect of electronic commerce and the importance of electronic payment in electronic commerce are briefly introduced. Then the concept, general model, pattern, classification and secure demands of electronic payment are discussed. Some information secure technology related to electronic payment, such as firewall technique, VPN technique, data encryption technique and SSL, SET, are also introduced. Subsequently, the main works of this paper are organized as follows: ① The SSL, which is a network telecommunication protocol, and SET, which is a protocol for electronic business, are studied in detail; Their feature, security, trade flow, advantages and disadvantages are analyzed. In succession, detailed compares are made between SSL and SET. ②Based on the sufficient comprehension of PayWord protocol, we expand and improve it to be suitable for WWW condition. Compared with original protocol, it is more practical, secure and fair. Moreover, it does not affect the performance of the system. And some further suggestions are proposed to improve PayWord protocol better. Finally, the research work of this paper is summarized and the future research direction is indicated.Keywords: Electronic Commerce； Electronic Payment； Digital Cash； Micro-payment； Cryptographic Technology