電子支付平臺(tái)安全性關(guān)鍵技術(shù)研究與實(shí)現(xiàn).pdf

1、東南大學(xué)碩士學(xué)位論文電子支付平臺(tái)安全性關(guān)鍵技術(shù)研究與實(shí)現(xiàn)姓名：祁雙雙申請(qǐng)學(xué)位級(jí)別：碩士專業(yè)：軟件工程指導(dǎo)教師：徐造林；余永進(jìn)20120603AbstractWiththerapiddevelopmentofinformationtechnologyandInternet，humansocietyenteredintoinformationageE—paymentisthekeylinkofEcommerce，whosesecurityh

2、asadirectimpactonthedevelopmentofelectroniccommerceAsthebusinessmodelofNetworkEconomy，E—commercemusthaveefficient，convenientandsafecharacteristicsThethird—partypaymentplatformachievedaseriesoffunctionssuchaspaymentandliq

3、uidationSoitssecurityisalsoconcemedbysocietyInthelongtermpractice，SSLprotocoliswidelyusedinelectronicpayment，butthetraditionalEpaymentsystemsareoftenusedSSLsingleauthenticationmodetoestablishthesecurechannelofcommunicati

4、onWiththeattackers’technologyconstantlyupdating，thedefectsexposedbysingleauthenticationbecameE—payment’SsecurityrisksTherefore，theresearchpurposeofthispaperismakingupforEpaymentsecurityflaws，improvingthesecurityofonlinep

5、aymentInthispaper，theauthoradoptscomparativemethod，firstlystudiescryptographytechnologyofsafetyelectronicpaymentsystemaswellasthestructureandprincipleofSSLprotoc01Asaresult，theorganiccombinationofthemcouldprotectthesecur

6、ityofE—paymentbetterSecondly，theauthormakesafurtherstudyandcomparationonthesingleauthenticationandtwo—wayauthenticationmodeofSSL，analyzestheirworkflow，securitytechnologyandtheabilityagainstattack，putforwardthatcompletetw

7、o—wayauthentication，verifyenchother’Sidentitybeforethetransactionofcommercialtenantandthirdpartypayment，consultthekeysandalgorithminthefuturesignatureandencryptionTheresultsindicatethattwo—wayauthenticationmakesupthesing

8、ledefectsofauthenticationeffectively，andhasagoodabilityagainsttheman—inthe—middleattacks，whichthesingleauthenticationCan’tresistLastly，theauthorreferencesSSLtwo—wayauthenticationmethod，combines謝ththecharacteristicsofE—pa

9、ymentplatform，designsandimplementstwowayauthenticationhandshakeinEpaymentsystem，signsandencryptsapplicationdatausingthealgorithmandkeysconsultedinhandshakeprocess；inthispapertheauthoralsoverifytheeffectivenessoftwo—wayau

10、thentication，testindicatesthatsystemhashighersecurityThroughthestudy，designandimplementation，theresultisthattheideaoftwo—wayauthenticationusedinelectronicpaymentsystem，couldimproveitssecurity，andtheanthoraddsthesessionre