Analysis on the Process of Cardholder Certificate Request in SET

赵敏,唐韶华

DOI: https://doi.org/10.3969/j.issn.1000-3428.2002.09.021

2002-01-01

Abstract:The process of cardholder certificate request in SET is analyzed in detail in this paper, and the formal descriptions of protocol data block are given. Furthermore, the security of the process is also analyzed.

What problem does this paper attempt to address?

The design of HTTP-based cardholder registration software for SET

Shaohua Tang,Weihua Ma

DOI: https://doi.org/10.1109/HPC.2000.843539

2000-01-01

Abstract:SET (Secure Electronic Transaction) protocol is one of the most important industry standards in electronic commerce, and the SET registration is the fundamental of all other SET transactions. A brief introduction to SET registration procedures is described, and then the system architecture of the cardholder registration software is designed. Our scenario has been implemented, and the instances of SET registration message flows are presented.
Model of Chinese Debit Card Secure Electronic Transaction Payment

梁晋,梁峰,高振华,李琪

DOI: https://doi.org/10.3321/j.issn:0253-987X.2001.08.006

2001-01-01

Abstract:Secure electronic transaction (SET) protocol is studied for the Chinese debit card. The characteristics of Chinese debit card are analyzed. A model and its protocol for Chinese debit card SET payment are provided to optimize SET protocol and to solve the Chinese debit card SET payment problem. This model not only increases the performance of Chinese debit card SET payment, but also enhances the authentication of card holders identity.
A Fair and Effective Secure Electronic Transactions Protocols

尹存燕,谢俊元

DOI: https://doi.org/10.3969/j.issn.1001-3695.2002.01.022

2002-01-01

Abstract:The SET (Secure Electronic Transactions) is an secure credit card transactions protocol, designed by MasterCard and VISA.A fair and effective secure electronic transactions protocol (SET 1)based on SET is given in the paper.The present protocol not only maintains the characters of SET,but also attains the evidences of a transaction and sets the status of a transaction.Finally, the security,effectiveness and fairness of the protocol are discussed.
Identity Authentication for Debit Card Secure Electronic Transaction Payment

梁晋,梁峰,高振华,李琪

DOI: https://doi.org/10.3321/j.issn:0253-987X.2001.12.012

2001-01-01

Abstract:This study is concerned with the authentication of debit card SET payment. Two protocols of card holder identity are presented. The first protocol deals with the PIN process in SET protocol, the influence of which is the least. The second protocol is based on the server-wallet mode, for balance check. These two protocols are adaptable to different environments, and they can meet the needs of the debit card SET payment.
Chinese Financial IC Card Secure Electronic Transaction Protocol and Model

梁晋,梁峰,高振华,李琪

DOI: https://doi.org/10.3321/j.issn:0253-987X.2001.10.011

2001-01-01

Abstract:The Chinese IC card is analyzed; it supports SET 1.0 protocol and provides two protocols and models. One is based on EMV'96 Chip Electronic Commerce Specification and translates Chinese financial IC data to the EMV data, whereby a change in the Chinese financial IC specification must to be made. Another is based on electronic deposit's unload transaction in Chinese financial IC specification. The cardholder system but is divided into two parts, not only for finishing the function of the SET card holder system but also for the authentication of the Chinese IC card.
Verification and improvement of SET payment protocols under instantiation space logic

xiao yinyin,su kaile,ma zhenyuan,hu ruo

DOI: https://doi.org/10.13245/j.hust.2013.07.015

2013-01-01

Abstract:The important properties of SET(secure electronic transaction)payment protocols were verified and improved by a knowledge reasoning method ISL(instantiation space logic)and its tool SPV(security protocol verifier).The method could verify the correctness of protocols in unbounded number of sessions compared with model checking method.By comparison with theorems or proved methods,the method was testified fully automatically.A model more closed to the original protocols was proposed by simplifying complex messages of protocols under the ISL and choosing the protocol steps rationally,without affecting the important security properties.The SPV formal description of the model and its properties(secrecy and authentication) was given,and the verification results and effectiveness were showed.The protocols were improved according to the unsatisfied epistemic specifications,and the improvement resolved the authentication problem between the cardholder and pay-gate in the protocols.
SETBOC--a New Secure Electronic Transaction Protocol Based on One-Way Certification Technique

黄少寅,陈勇,高传善

DOI: https://doi.org/10.3321/j.issn:1000-436x.2003.12.024

2003-01-01

Abstract:Traditional secure electronic transaction protocols such as SET adopts across identity certification strategy, thus has the followed flaws: protocol is very complex and efficiency of protocol is very low. Due to these flaws, we present a new secure electronic transaction protocol named SETBOC which based on one-way certification technique. Through the analysis the process flow of SETBOC, we prove that SETBOC can finish the identity certification among client, merchant and pay-gateway, keep respective information secret, satisfy the money atomicity, and has the characteristic of high run efficiency and easy to implement. SETBOC also provides a arbitrate strategy for the conflict between client and merchant.
Financial IC Card Authentication System and Its Security Analysis

冯志兴,李建华,王轶俊

DOI: https://doi.org/10.3969/j.issn.1009-8054.2009.03.024

2009-01-01

Abstract:The inherent security of IC card is one of the main driving forces of the EMV migration abroad and the PBOC2.0 financial IC card migration at home.The paper discusses the four major parts of the security certification system IC card data authentication,cardholder identification,message security and transaction authentication,and ana-lyzes the security of this certification system.
Model and Analysis of Dual Signature in SET Protocol Based on Petri Nets

XIONG Dan-dan,XUE Zhi,WANG Yi-jun

DOI: https://doi.org/10.3969/j.issn.1009-8054.2007.11.033

2007-01-01

Abstract:Dual signature is an important feature of Secure Electronic Transaction protocol.Its combination of hashes and digital signatures makes several parties agree on a transaction without each of them receiving a complete view of transaction.In this paper,dual signature is modeled and formally specified on the basis of Petri nets,and then its security is discussed and analyzed.
Applications of HECC Cryptography in SET Protocol

XU Chun-xiang

2007-01-01

Abstract:SET protocol is one of the most important protocols in E-commerce.In this paper,HECC is introduced and analysed,it can reduce the storage and raise the speed of computing compare with other technologies,so it can be widely used in resource-limited terminals.
A Research on Performance Evaluation Method of Central Authentication Service

YANG Fan,DI Dehai,HAN Bo,LI Yiming

2012-01-01

Abstract:This paper analyzed the authentication process of Central Authentication Service(CAS),and designed atesting program to simulate a full authentication process.In the experimental environment,we verified the viability ofthis program,and gave stress testing and performance evaluation method of CAS.
Electronic Payment System Design Based on SET and TTP

Xu Yong,Liu Jindi

DOI: https://doi.org/10.1109/ICEE.2010.77

2010-01-01

Abstract:This paper puts forward a new electronic payment improved scheme, which combines SET and TTP. The scheme aims to design a safer and reliabler electronic payment system. Through the comparative analysis method, this paper analyzes the disadvantages of the SSL and SET payment protocol, and the existing problems of the third-party payment(TTP) platform, and use the method of capital trusteeship with guarantee of insurance to solve precipitation risk problems. The new electronic payment system can effectively guarantee the safety of transaction, can further promote electronic payment and the development of e-commerce.
Research on the Chnese Financial IC Card Supporting SET 1.0 Procotol Based Unload Operation

梁晋,梁峰,李琪,高振华

DOI: https://doi.org/10.3969/j.issn.1001-2400.2001.06.034

2001-01-01

Abstract:This paper analyzes how the Chinese ICC supports SET 1 0 protocol, and provides the protocol to finish the Chinese ICC SET payment based on electronic deposits unload transaction of Chinese financial IC specification. The cardholder system is divided into two parts: one is the cardholder client which processes the interface to the cardholder and IC card, the other is the cardholder sever which processes almost SET cardholders functions, and finishes the first host process demanded by electronic deposits unload transaction. This procotol resolves the Chinese ICC to support SET 1 0 and does not modify the standard of SET and Chinese ICC, which is very practical.
A Unified Authentication Scheme Based on Analytic Mechanism

Yong Xu,Yejuan Cheng,Chang Xiao

DOI: https://doi.org/10.14257/ijsia.2015.9.1.26

2015-01-01

International Journal of Security and Its Applications

Abstract:To resolve security issues and management issues of different Certificate Authorities (CAs), this paper proposed a unified authentication scheme, which will make different Certificate Authorities (CAs) be uniformly authenticated. In addition, it showed the whole structure of the scheme, added an extensional registration number to certificates and designed unified authentication process for the scheme. The unified authentication process was modelled and simulated by Coloured Petri Net (CPN) Tools and verified by analyzing the state space of CPN model. In conclusion, this paper provides a unified authentication service and confirms that the proposed scheme is totally controllable, realizable and feasible. The suggested scheme can enhance the efficiency and security of authentication systems and achieve good results in practical applications.
A Security Scheme Based on Smart Card

沈炜,陈纯

DOI: https://doi.org/10.3969/j.issn.1000-3428.2002.01.019

2002-01-01

Abstract:As a kind of low cost device of tamper resistance, the smart card has been used for many purposes. But, a number of techniques for attacking smart cards are also known and they show that building secure and effective issuing architecture is much harder than it looks. In this paper, we analyze trust relationship among entities in issuing architecture and classify possible attacks. Furthermore a set of protocols have been presented and on the basis of them, a secure scheme is given.
An Improved Extending the SET with Non-Repudiation

ZHANG Jin-xiang,LI Qi,QING Si-han

DOI: https://doi.org/10.3969/j.issn.1001-7119.2006.04.027

2006-01-01

Abstract:SET(Secure Electronic Transaction)is an immense security protocol which is designed to secure e-commerce transaction.This paper describes the purchase phase of the SET protocol and an attack on the phase in details.The scheme we proposed in this paper efficiently prevents the attack and guarantees the non-repudiation in the purchase phase of the transaction.
Security Design for Multi-service Smart Card Systems

Mei Hong,Hui Guo,Bin Luo

DOI: https://doi.org/10.1109/FGCN.2008.25

2008-01-01

Abstract:A multi-service smart card system enables users to access different services over an open network with a single smart card. Due to its highly economic and social benefits, the multi-service smart card system has drawn much attention in industrial and academic areas. However, the big hindrance to its wide employment is the risk of breaching user service confidentiality and privacy across different service systems. This paper proposes a secure multi-service system model to overcome such a problem. The model allows users to access different services with a single password. The privacy and service confidentiality are achieved through a set of protections-password protection, user identity protection, and service transaction protection-to guarantee the userÂ¿s anonymity to all service systems and ensure high unlinkability between different services.
Security Analysis and Enhancement of a Dynamic Identity Based Authentication Scheme Using Smart Cards

Xiong Li,Jianwei Niu,Muhammad Khurram Khan,Junguo Liao

DOI: https://doi.org/10.1109/ISBAST.2013.27

2013-01-01

Abstract:Remote user authentication is an important and efficient method to ensure security for many network-based application systems. So far, several dynamic identity based authentication schemes have been proposed to protect the user's anonymity. Recently, Sood pointed out the security weaknesses of a dynamic identity based authentication scheme, which was proposed by Wang et al. presented an improved scheme. However, in this paper, we demonstrate that Sood's scheme cannot resist leak of verifier attack, impersonation attack and server spoofing attack. Furthermore, Sood's scheme cannot achieve mutual authentication between the user and the server. Consequently, in this paper, we propose a new dynamic identity based user authentication scheme using elliptic curve cryptosystem to resolve all the aforementioned problems.
Formal Analysis Of Selective Disclosure Attribute-Based Credential System In Applied Pi Calculus

Caimei Wang,Yan Xiong,Wenchao Huang,Huihua Xia,Jianmeng Huang

DOI: https://doi.org/10.1109/TrustCom.2016.0044

2016-01-01

Abstract:We propose a general framework of formally verifying selective disclosure attribute-based credential system. The framework includes two modules: the first module allows user to receive a credential, which contains a list of attributes, from a trusted party; the second module allows user to convince a service provider with the credential. Particularly, the user can selectively disclose parts of the attributes according to the requirement of the service provider, while not revealing the rest of the attributes. We formalize the framework with applied Pi calculus. It can be used to check attribute-based credential system on security properties. In our experiments, we apply the framework to a concrete security protocol and successfully prove the authenticity properties in the protocol using ProVerif.
Improvement to Information Transaction Model Based on SET Protocol

Mengjin Tian,Yuhang Yang,Jianhua Li

DOI: https://doi.org/10.3321/j.issn:1006-2467.1999.01.024

1999-01-01

Shanghai Jiaotong Daxue Xuebao/Journal of Shanghai Jiaotong University

Abstract:Upon the idea of electronic commerce, an information transaction model based on SET protocol was presented. The operation process was also-described. The highlights of the model include: a very low transaction costs for micropayments; protection of the privacy of the transaction; certified delivery mechanism which delivers information if and only if the customer has paid for them; and highly scalability.

Analysis on the Process of Cardholder Certificate Request in SET

The design of HTTP-based cardholder registration software for SET

Model of Chinese Debit Card Secure Electronic Transaction Payment

A Fair and Effective Secure Electronic Transactions Protocols

Identity Authentication for Debit Card Secure Electronic Transaction Payment

Chinese Financial IC Card Secure Electronic Transaction Protocol and Model

Verification and improvement of SET payment protocols under instantiation space logic

SETBOC--a New Secure Electronic Transaction Protocol Based on One-Way Certification Technique

Financial IC Card Authentication System and Its Security Analysis

Model and Analysis of Dual Signature in SET Protocol Based on Petri Nets

Applications of HECC Cryptography in SET Protocol

A Research on Performance Evaluation Method of Central Authentication Service

Electronic Payment System Design Based on SET and TTP

Research on the Chnese Financial IC Card Supporting SET 1.0 Procotol Based Unload Operation

A Unified Authentication Scheme Based on Analytic Mechanism

A Security Scheme Based on Smart Card

An Improved Extending the SET with Non-Repudiation

Security Design for Multi-service Smart Card Systems

Security Analysis and Enhancement of a Dynamic Identity Based Authentication Scheme Using Smart Cards

Formal Analysis Of Selective Disclosure Attribute-Based Credential System In Applied Pi Calculus

Improvement to Information Transaction Model Based on SET Protocol