電子支付平臺安全性關(guān)鍵技術(shù)研究與實現(xiàn).pdf

1、東南大學碩士學位論文電子支付平臺安全性關(guān)鍵技術(shù)研究與實現(xiàn)姓名：祁雙雙申請學位級別：碩士專業(yè)：軟件工程指導教師：徐造林；余永進20120603AbstractWiththerapiddevelopmentofinformationtechnologyandInternet，humansocietyenteredintoinformationageE—paymentisthekeylinkofEcommerce，whosesecurityh

2、asadirectimpactonthedevelopmentofelectroniccommerceAsthebusinessmodelofNetworkEconomy，E—commercemusthaveefficient，convenientandsafecharacteristicsThethird—partypaymentplatformachievedaseriesoffunctionssuchaspaymentandliq

3、uidationSoitssecurityisalsoconcemedbysocietyInthelongtermpractice，SSLprotocoliswidelyusedinelectronicpayment，butthetraditionalEpaymentsystemsareoftenusedSSLsingleauthenticationmodetoestablishthesecurechannelofcommunicati

4、onWiththeattackers’technologyconstantlyupdating，thedefectsexposedbysingleauthenticationbecameE—payment’SsecurityrisksTherefore，theresearchpurposeofthispaperismakingupforEpaymentsecurityflaws，improvingthesecurityofonlinep

5、aymentInthispaper，theauthoradoptscomparativemethod，firstlystudiescryptographytechnologyofsafetyelectronicpaymentsystemaswellasthestructureandprincipleofSSLprotoc01Asaresult，theorganiccombinationofthemcouldprotectthesecur

6、ityofE—paymentbetterSecondly，theauthormakesafurtherstudyandcomparationonthesingleauthenticationandtwo—wayauthenticationmodeofSSL，analyzestheirworkflow，securitytechnologyandtheabilityagainstattack，putforwardthatcompletetw

7、o—wayauthentication，verifyenchother’Sidentitybeforethetransactionofcommercialtenantandthirdpartypayment，consultthekeysandalgorithminthefuturesignatureandencryptionTheresultsindicatethattwo—wayauthenticationmakesupthesing

8、ledefectsofauthenticationeffectively，andhasagoodabilityagainsttheman—inthe—middleattacks，whichthesingleauthenticationCan’tresistLastly，theauthorreferencesSSLtwo—wayauthenticationmethod，combines謝ththecharacteristicsofE—pa

9、ymentplatform，designsandimplementstwowayauthenticationhandshakeinEpaymentsystem，signsandencryptsapplicationdatausingthealgorithmandkeysconsultedinhandshakeprocess；inthispapertheauthoralsoverifytheeffectivenessoftwo—wayau

10、thentication，testindicatesthatsystemhashighersecurityThroughthestudy，designandimplementation，theresultisthattheideaoftwo—wayauthenticationusedinelectronicpaymentsystem，couldimproveitssecurity，andtheanthoraddsthesessionre