SET协议改进方案及其支付模型及研究.doc

SET协议改进方案及其支付模型的研究 Research on Improved Scheme of SET Protocol and Its Application on Payment Model ABSTRACT 随着Internet的蓬勃发展，电子商务正以自身高效、低成本的优势，逐步成为新兴的商业模式和理念。由于电子商务是建立在开放的Internet平台上的，而在开放的网络上传输的任何信息都可能被他人载取，因此，要发展电子商务必须解决安全问题。电子商务中的安全协议主要采用SSL协议和SET协议。 SET (Secure Electronic Transaction)安全电子交易协议是由美国Visa和MasterCard两大信用卡组织提出的应用于Internet上的以信用卡为基础的电子支付系统协议。SET中的核心技术主要有数据加密、数字签名、电子信封、电子安全证书等。它主要是为了解决用户、商家和银行之间通过信用卡支付的交易而设计的，以保证支付信息的机密、支付过程的完整、商户及持卡人的合法身份、以及可操作性。 本文通过对电子商务的基本概念、安全体系、支付系统的剖析，对SET协议的安全技术、认证体系、交易流程等方面的分析研究，指出了SET协议存在的缺陷，提出了对SET协议的改进方案，而且给出了改进后的数据流程和数据结构，最后，设计了基于改进后的SET协议的一个安全电子商务模型，以及该模型的各个软件端模块，分析其实用性和安全性。改进后的SET协议优化了协议的交易速度，提高了协议的安全性，使其有更高的适用性。 关键词:电子商务;SET协议;SSL协议;电子支付模型;信息安全 Abstract Accompanying with the development of Internet, E-Commerce, with its advantages of high efficiency and low cost, has become new business mode and conception step by step. Based on an open Internet, any transaction message of electronic commerce transmitted through Internet would be probably intercepted, so it is greatly demanding to solve the security problem for developing electronic commerce. E-Commerce security protocol usually adopts SSL and SET protocol. SET protocol is an electronic payment system protocol based on credit cards which was proposed by the two great credit card organizations Visa and MasterCard to be used on Internet .The core technology in SET includes data encryption, data signature, electronic envelope and electronic secure certificate etc.SET is designed mainly to solve transactions through credit card payment among the customer and the merchant and the bank, so as to protect the secret of payment information,the integrity of payment process, the legal status of merchants and card-holders, and the operability. This thesis analyzes the basic concepts, the security infrastructure and payment system of electronic commerce, makes a thorough and comprehensive researcb on the security technology, authentication and transaction process, point