PKI:Fundamental of Secure Electronic Commerce

Yajie Li,Qiufeng Wu,Meng Yuan

DOI: https://doi.org/10.3321/j.issn:1002-8331.2001.10.015

2001-01-01

Abstract:The development of electronic commerce requires the high security of network communication,PKI is an effective solution. This paper introduces basic structure,evaluation standard and major design problems of PKI.

What problem does this paper attempt to address?

PKI Technology for Data Encryption

Zhu Zhenfang

Abstract:These PKI is a kind of follow the standard use of public key encryption technology for the development of e-commerce to provide a secure foundation platform technology and specifications. The application of digital certificates is under the network environment to solve the problem such as identity authentication, access control, and information protection. This thesis mainly studied the part of the problem, this paper introduced the basic knowledge of cryptography and PKI theory foundation and basic system, of several common PKI trust model had carried on the detailed introduction, designed the distributed network environment, interconnection security platform of authentication and information encryption module.

Computer Science,Engineering
Research On Information Security Of Electronic Commerce Logistics System

Guoning Lv,Min Gao,Xiaoyu Ji

DOI: https://doi.org/10.1007/978-3-319-42291-6_60

2016-01-01

Abstract:Nowadays the logistics system has become an indispensable element for economic commerce activities, while information security is an important foundation in ensuring the development of electronic commerce logistics system. The purpose of this paper is to investigate the role of information security in electronic commerce logistics system. In that regard, an information security model is developed to protect the electronic commerce logistics system.
FAIR EXCHANGE PROTOCOLS WITH OFF-LINE SEMI-TRUSTED THIRD PARTY

Xiao-ning JIANG,Cheng-qing YE,Xue-zeng PAN

2001-01-01

Journal of Computer Research and Development

Abstract:Electronic commerce is a main trend in Internet applications, which should be based on fair exchange. A new fair exchange protocol with off-line semi-trusted third party is proposed. It is also efficient in the sense that it only needs 4 messages in a transaction. In the meantime all messages are encrypted naturally, which makes it appealing over large open networks that have little or no physical security, such as Internet. It is based on publicly verifiable secret sharing (PVSS) theory.
A High Strength PKI Structure Designof Network Transmission

Jia ZHU,Yi HUANG,Jianhua CHEN

DOI: https://doi.org/10.3963/j.issn.1007-144X.2007.03.007

2007-01-01

Abstract:Focused on the present network communicating software,a high strength PKI structure is designed to guarantee the security of communication,as well as the secrecy and integrity.The security of this design of PKI,by encrypting and signing the message is introduced.This design mainly includes the certificate structure,the certificate application,the production flow,the user registers with the message transmission flow and so on.
A PKI-Based Authentication Approach for E-Business Systems

Siyu Gan,Gu, Chunhua,Xueqin Zhang

DOI: https://doi.org/10.1109/IEEC.2010.5533219

2010-01-01

Abstract:With the rapid development of E-Business systems, the technology of distributed services and security becomes research focus in the field of Internet based applications. The distributed E-Business application platform has strong security requirements and specific demands on secure user authentication. After analyzing the distributed authentication protocol and public key infrastructure (PKI), a method for distributed E-Business application authentication using public key cryptography is introduced in this paper. By distributing most of the authentication workload away from the trusted intermediary and to the communicating parties, significant enhancements to security and scalability can be achieved.
A Security Grid Portal Using PKI and Online Proxy Certificate Repository

Jie Jiang,Deren Chen,Tim Chen,Xiaodong Shen

DOI: https://doi.org/10.1109/imsccs.2006.169

2006-01-01

Abstract:With the development of grid service, there are two key problems to be improved. One is to access Web grid service with friend interface for user. Another is the security authentication for grid resource share. Nowadays, a solution of Web universal entrance for grid service has been given through a Web framework named grid portal. PKI based grid security infrastructure has been widely used in order to guarantee grid security. However, although proxy certificate has been well applied in GSI, there is still no integrated model for security grid portal based on PKI and proxy mechanism. From the view of cooperation, a security grid portal is proposed based on PKI and online proxy certificate repository. It can successfully move the user's credential from the PKI public key certificates to its proxy certificate issued by online proxy certificate repository, which makes a Web user be easily authenticated through Web client to any grid service process
Security Middleware for Enhancing Interoperability of Public Key Infrastructure

KY Lam,SL Chung,M Gu,JG Sun

DOI: https://doi.org/10.1016/s0167-4048(03)00615-1

IF: 5.105

2003-01-01

Computers & Security

Abstract:This paper describes a security middleware for enhancing the interoperability of public key infrastructure (PKI). Security is a key concern in e-commerce and is especially critical in cross-enterprise transactions. Public key cryptography is widely accepted as an important mechanism for addressing the security needs of e-commerce transactions because of its ability to implement non-repudiation. The deployment of public key cryptography is facilitated by the provision of PKI which assures the integrity of cryptographic keys. Nevertheless, industry experiences have shown that the task of implementing PKI-based e-commerce applications is challenging. Prior studies have identified interoperability as a major issue that hinders the adoption of PKI in spite of its effectiveness in implementing strong security mechanisms and protocols. In this paper, we discuss the interoperability issue of PKI applications. This research is part of our effort in designing security infrastructure for e-commerce systems. A middleware architecture was designed to enhance interoperability of PKI applications. The security middleware aims to promote cross-enterprise cross-border e-commerce transactions. The proposed mechanism is proven to be practical in real deployment environment.
Secure Information Exchange Model Between PDM Systems

刘端阳,平玲娣,潘雪增

DOI: https://doi.org/10.3785/j.issn.1008-973x.2004.01.006

2004-01-01

Abstract:With the development of collaboration among enterprises, it is very desirable to securely exchange information between PDMs through Internet. The original user/password mechanism is very weak, unsecure and inflexible. And also,authorization based on PKC(public key certificate) cannot satisfy the temporary relations between enterprises. In order to satisfy the demand of secure information exchanges between enterprises, according with the genernal security management model of PDM system, This paper designed an AC(attribute certificate) model based on PKC. The model was based on TTP architecture to achieve trust between enterprises and automation of enterprises' collaboration, and reduced the startup cost. And it provides not only reliable authentication and data protection, but also flexible access control and secure audit, and effectively implements information exchanges between enterprises. The new model can be well used in the fields of automobile manufacture,electronics,mechanics and so on.
Windows 2000 Public Key Infrastructure and Electronic Commerce

梁晋,施仁,梁峰,彭波

DOI: https://doi.org/10.3969/j.issn.1000-3428.2000.07.001

2000-01-01

Abstract:This paper introduces the technology of Public Key Infrastructure (PKI) in Windows 2000 and describes how to use it in electronic commerce. Standards for PKI are still evolving even as they are being widely implemented as a necessary element of electronic commerce. There are some new features in Windows 2000's PKI. Windows 2000 will become the ideal platform of electronic commerce.
Towards a Scalable PKI for Electronic Commerce Systems.

Chenxi Wang,William A. Wulf

DOI: https://doi.org/10.1109/WECWIS.1999.788201

1999-01-01

Abstract:In an e-commerce system, security, in particular authentication, is of paramount importance. Public-key Infrastructure is often used to enforce authentication and the property of non-repudiation. However, the current designs of public-key cryptosystems require a centralized, trusted key server to generate and distributed keys. This distinguished, trusted entity introduces security vulnerabilities as well as an impediment where scalability is concerned.We present in this paper a novel way to perform distributed key generations which do not rely on any system-wide trusted entities. We assign a unique range of m-bit numbers to each key generator in the system. As a result, the lower-order m bits of the keys generated falls onto a unique number in the range. We also present a key generation architecture to facilitate the use of such a method.Our scheme is secure against factoring and brute force attacks, and it provides a basis for building scalable PKIs for distributed applications such as electronic commerce.
The Solution of Security of Web Application Based on PKI/PMI

Wu Peng,Su Xinning

DOI: https://doi.org/10.3321/j.issn:1002-8331.2006.06.001

2006-01-01

Abstract:At present,the main research fields of security technology are network security,security protocol and encryption arithmetic.The research of security of application layer is want,and ongoing research projects is part application oriented,such as safe mail system,safe document system.This paper designs a Web application security total solution based on PKI/PMI,to implement security control for application layer,and proposes the method to implement by an instance.
The Design and Implementation of Campus Networks Security System Based on Public Key Infrastructure (PKI)

FU Yongping,ZHAO Yinliang,ZHONG Shenghai,FU Zhengfang

2006-01-01

Abstract:In this paper, the author researched the character of Campus Networks, designed a Campus Networks security System based on Public key Infrastructure (PKI) and implemented the system based on JAVA.
Research of PKI Technology Based on Grid Security

ZHANG Qiuvyu,JIN Ying-qin,YU Dong-mei,ZHANG Jun-min

DOI: https://doi.org/10.3969/j.issn.1000-7024.2007.09.019

2007-01-01

Abstract:As a kind of favorite method for web connection.Grid is a sort of new interconnection technology,which has some faults that derive from last two generations technology for network,so they are inevitable.In many faults,the first problem is how to ensure safe transportation in grid environment.Firstly,requirements of grid PKI are investigated.Secondly,the strategies are analyzed to adjust to PKI authentication in grid environment.Finally,a paradigm of severing for large-scale security authentication is presented,which manage grid resources in grid environment dynamically and effectively.
Public Key Infrastructure: Managing the E-Business Security

XJ Lai

DOI: https://doi.org/10.1007/978-0-387-35515-3_52

2000-01-01

Abstract:With the recent explosive growth of the Internet, more and more business are conducted over the open communication network. The increase of information transmitted electronically has lead to an increased need for security. Cryptographic techniques, especially the public-key cryptographic techniques are used to provide the necessary protection to ensure such business process. The widespread of public-key technology requires a reliable and trusted system to manage public keys. Public-key infrastructure provides such a system for mange the trust of the public keys.
Sec-P2P-EC:Security Framework of Peer-to-Peer E-Commerce

Zheng ZHANG,Xue-ping WANG,Yi-nan JING,Jin-hua JING

DOI: https://doi.org/10.3321/j.issn:1002-8331.2006.33.062

2006-01-01

Abstract:With the background the famous P2P software Skype entering C2C e-commerce platform,this paper proposes a security framework Sec-P2P-EC for e-commerce which is based on structured P2P network.Sec-P2P-EC is fit for current e-commerce background with a simplified single layer PKI.It takes the PKI security service as the core idea,takes Chord as the highly effective inquiry protocol for generation,distribution,retrieve of goods keywords,certificates and evaluations. Therefore Sec-P2P-EC has high security,reliability and efficiency.It enables Sec-P2P-EC to apply directly in P2P e-commerce environment of single platform provider.
Design of Public Key Infrastructure System

孟桂娥,董玮文,杨宇航

DOI: https://doi.org/10.3969/j.issn.1000-3428.2001.06.047

2001-01-01

Abstract:The thesis introduces the goal of the PKI system design ,analyzes the critical problems in PKI system development ,discusses the certificate-related data objects processing,the secure socket layer,the PKI interface of browser in detail.
A Design Scheme of Enterprise Secure Communication Platform

王秀琴,华蓓

DOI: https://doi.org/10.3969/j.issn.1001-3695.2001.02.043

2001-01-01

Abstract:By the theory of public key infrastructure PKI and theauthentication structure of electronic transaction system, this paper puts forward a design scheme of enterprise security communication platform based on certificate authority (CA), gives a model and analyses the system's security in detail.
Security of E-Government: Extensive Implementation of PKI is the Key

Xin Zhao

2005-01-01

Abstract:E-government ranks the first in the undertakings of information superhighway advocated by countries all over the world. To ensure the security of e-government has become a key factor in the development of e-government. The author holds the view that that the extensive implementation of PKI is the key to the security of e- government.
The Study of Secure Electronic Commerce Solution

Weidong Chen

2000-01-01

Abstract:In the paper,I discuss and study the Electronic Commerec system based on Internet,and particularly discuss the Electronic Commerce structrure、solution and transaction flow.
PKI-based Information Security Adm inistration Mechanism on Internet Content Classification

yin ying,fan lei,li jianhua

2001-01-01

Abstract:The overabundant unwanted information and miscellaneous applications in internet have necessitated the Internet content c lassification and real -time contro l.This paper analyzes the Information Security Administration Mechanism on Internet Content Classification and the Public Key Infrastructure.Then new administration architectu re is presented,which integrates PK I with traditional content classifica-tion scheme.

PKI:Fundamental of Secure Electronic Commerce

PKI Technology for Data Encryption

Research On Information Security Of Electronic Commerce Logistics System

FAIR EXCHANGE PROTOCOLS WITH OFF-LINE SEMI-TRUSTED THIRD PARTY

A High Strength PKI Structure Designof Network Transmission

A PKI-Based Authentication Approach for E-Business Systems

A Security Grid Portal Using PKI and Online Proxy Certificate Repository

Security Middleware for Enhancing Interoperability of Public Key Infrastructure

Secure Information Exchange Model Between PDM Systems

Windows 2000 Public Key Infrastructure and Electronic Commerce

Towards a Scalable PKI for Electronic Commerce Systems.

The Solution of Security of Web Application Based on PKI/PMI

The Design and Implementation of Campus Networks Security System Based on Public Key Infrastructure (PKI)

Research of PKI Technology Based on Grid Security

Public Key Infrastructure: Managing the E-Business Security

Sec-P2P-EC:Security Framework of Peer-to-Peer E-Commerce

Design of Public Key Infrastructure System

A Design Scheme of Enterprise Secure Communication Platform

Security of E-Government: Extensive Implementation of PKI is the Key

The Study of Secure Electronic Commerce Solution

PKI-based Information Security Adm inistration Mechanism on Internet Content Classification