【作者】 王丹卉；

【导师】 李晖；

【作者基本信息】 西安电子科技大学 ， 通信与信息系统， 2005， 硕士

【摘要】 本文主要对基于XML的电子商务安全协议进行了研究。首先介绍了XML的基础知识和相关的技术标准，然后引入了电子商务、支付系统及安全保密技术。接着在简要介绍两种基于信用卡的安全电子支付协议——SET协议和3-D Secure协议的基础上，提出了一种3-D Secure协议的安全性加强方案。最后设计了一种方便、安全、信用度高、风险小且极具应用价值的数字本票支付协议。 本文得到的主要成果如下： 1．对SET协议和3-D Secure协议进行了全面的探讨、比较与分析，得到3-D Secure协议的不可否认性较弱的结论。 2．提出了一种3-D Secure协议的安全性加强方案，用SVO逻辑对方案进行形式化分析，结果表明该方案可以达到认证目标。 3．提出了一种数字本票支付协议，用SVO逻辑对协议进行形式化分析的结果表明该协议可以达到安全目标，并设计了一个基于XML和JSP的实现方案。更多还原

【Abstract】 E-Commerce security protocols based on XML are discussed in the paper. Basic knowledge of XML and relevant technical standards are presented, then introduced E-Commerce, payment system and cryptology. SET protocol and 3-D Secure protocol are two kinds of secure electronic payment protocol based on credit card. A new scheme of 3-D Secure protocol was proposed based on the comparison of them. Finally, a new digital cashier’s order payment protocol is presented. This protocol is much more efficient than SET protocol.The main contents are:1. SET protocol and 3-D Secure protocol are discussed, compared and analyzed, and the results obtained demonstrate that 3-D Secure protocol is weaker than SET protocol in security.2. To strengthen security, a new scheme of 3-D Secure protocol was given and analyzed using SVO logic. The results indicate that the new scheme can reach authentication targets.3. A new digital cashier’s order payment protocol is proposed. By this protocol, a consumer can do payment to a specified merchant anonymously. The digital cashier’s order can only be used once and the transaction can’t be denied. The protocol is analyzed using SVO logic, and the results obtained demonstrate that this protocol can reach security goals. Finally, a simulation scheme based on XML and JSP is presented.更多还原