【作者】 张伟丽；

【导师】 杨鼎才； 王仲文；

【作者基本信息】 燕山大学 ， 通信与信息系统， 2007， 硕士

【摘要】 网上银行是电子商务的核心活动。由于它是一种网络应用，它的所有内容都是以数字的形式流转于Internet之上，因此在网上银行的应用中不可避免的存在着由Internet的自由开放所带来的安全隐患。调查表明，信息安全问题是目前网上银行发展的瓶颈。然而，近年来人们更多的关注于信息在网络上的安全传输即网络安全方面，而忽略了客户端的安全尤其是银行客户端的安全，给攻击者以可乘之机，给用户造成巨大损失。本文主要对网上银行客户端的签名环境进行了研究，针对目前网上银行中的安全威胁，设计一种可信签名终端模型，并给出模型的实现方案，解决网上银行中交易的篡改和交易的伪造。本文首先介绍了数字签名的理论基础以及基于数字签名技术的网上银行的应用状况；并且对各国的电子签名法进行了研究，按照签名法中可信签名的要求对签名生成系统模型中的主要部件：SCA(Signature CreationAppliation)和SSCD(Secure Signature Creation Device)进行安全需求分析，并对现有网上银行客户端的签名环境进行分析。然后，在以上研究基础之上，以签名法中的可信签名要求为标准提出基于“物理交易认证”的客户端安全签名环境方案。该方案主要包括：基于改进的Diffie-hellman的身份认证协议和基于第三方设备的“物理交易认证”的安全签名环境，并用BAN逻辑对协议进行形式化论证分析，对签名环境进行安全性分析。最后，在现有USBKey(Universal Serial Bus Key)的基础上进行改进，给出了可信签名终端设备TUSBKey(Trusted USBKey)的实现方案。可信签名方案解决了网上银行中交易篡改和交易伪造的问题。更多还原

【Abstract】 The internet-banking is one of the core activities of the electronic commerce. Because it is one kind of network application, its all contents are transferred in the network in the form of digital signal. There are lots of hidden security troubles which brought by internet free opening during the application of internet banking. The investigation indicats that the information security is the key problem of the internet-banking development. In recent years, people pay more attention to the information transmission security but neglect the security of the internet-banking client. The heavy loss is created to the user.In this paper, the digital signature environment of the internet-banking client is researched. A trusted digital signature model based on the trusted terminal device is proposed, which settles the problems of forgery attack and hijack attack.Firstly, the rationale of the digital signature and the internet-banking application based on the digital signature technology are introduced. As the digital signature law is the guidance of the signature implementation, so the international digital signature is researched. According to the law, the security requirement of the SCA(Signature Creation Application) and SSCD(Secure Signature Creation Device) is analyzed. SCA and SSCD are the main parts of the signature creation system. And the digital signature environment of the internet-banking is analyzed in detail.Secondly, based on the foundation in above, a safe signature environment scheme based on "the physical transaction authentication"is proposed. The safe signature scheme is composed of the authentication protocol based on the Diffie-Hellman protocol and trusted signature model based on the third device. And the authentication protocol is analyzed by the BAN logic. At last, a realization scheme of the trusted terminal device TUSBKey is given based on the improvement of the USBKey. The trusted-signature scheme settles the problems of the forgery attack and hijack attack.更多还原