Electronic commerce system and management method thereof based on digital certificate

Abstract

The invention relates to an electronic commerce system and a management method thereof based on a digital certificate. A management server issues certificates and corresponding certificate private keys for each user end and each transaction server; the user end can access different transaction servers according to the certificate issued by the management server and can be accessed to different transaction servers to carry out electronic commerce action without unnecessary logging operation; in addition, after the management server validates the identities of the user end and the transaction server, and when a concrete electronic transaction is carried out, the transaction server validates the validity of the content of an electronic contract, and the management server judges the validity of the transaction so as to realize uniform authentication and management for electronic commerce behaviors and ensure the trusty degree of network electronic transaction behaviors.

Description

Technical field [0001] The invention relates to the technical field of digital information networks, in particular to an e-commerce system based on digital certificates and a management method thereof. Background technique [0002] With the increasing development of network technology, e-commerce has greater convenience and flexibility than traditional business methods, and people can conduct business activities without leaving home, thus becoming a new business activity widely used by people. Mode, more and more people conduct various business activities through the Internet, and new types of e-commerce applications such as online banking, electronic trade in goods and services, electronic securities transactions, commercial auctions, cooperative design and engineering, access to public products, etc. Constantly rising. [0003] However, due to the openness of transaction networks such as the Internet, the security problems faced by the network also follow. In e-commerce transac...

AI Technical Summary

Problems solved by technology

[0003] However, due to the openness of transaction networks such as the Internet, the security problems faced by the network also follow. In e-commerce transactions, there may be problems such as stealing secrets, destroying, intercepting, illegally accessing, destroying the integrity of information, Destroy the availability of the system and many other problems

At present, in order to solve the security problems of networks and systems, firewalls, intrusion detection, vulnerability scanning, and network isolation are usually used. However, although these information security technologies can play a greater role in preventing external attacks and illegal intrusions, etc. However, it cannot fully meet the security needs of e-commerce. The security problem of e-commerce is not only the confidentiality of information, but also includes other security problems: First: because illegal users can forge and counterfeit e-commerce Therefore, users who log in to the e-commerce system cannot know whether the website they log in is a credible e-commerce website, and e-commerce websites cannot verify whether the users who log in to their website are authenticated and legitimate Users and illegal users can take the opportunity to destroy and disturb the network order. Although the "username + password" authentication method can be used, its security is weak, and the user password is easy to be stolen and lost; second: due to the openness of the network Sensitive information and transaction data may be maliciously tampered with during transmission; third: Since e-commerce is not a physical transaction, the two parties to the transaction do not have transaction evidence such as a physical contract. Therefore, once the online transaction is traded Denied by one party, the other party has no relevant records as an arbitrable basis

[0004] Aiming at the above-mentioned security problems in e-commerce, the e-commerce security solution of the PKI (Public Key Infrastructure) technology currently used can identify the parties to the transaction by issuing digital certificates for all parties to the transaction, and During the process, digital certificates are used to verify the identity and signature of both parties to the transaction, which satisfies the security requirements of e-commerce to a certain extent. Provide an online trading platform to implement transactions, but the identity of the service provider and the authenticity, legality, validity, and openness of the goods and services have no third-party credible guarantees and explanations, resulting in an increasing number of illegal online transactions, seriously affecting The security and order of the Internet, under the current situation that the laws and regulations of online transactions have not yet been fully established, how to supervise the increasingly large-scale online e-commerce behavior as a management department is an increasingly urgent problem. In addition, there are different electronic service providers in the Internet. Different e-commerce networks have been established. For users, every time they access a different e-commerce network, they need to perform tedious tasks such as user information registration and identity verification. Some current e-commerce networks build their own authentication centers as Users issue digital certificates. For users, facing an increasingly large number of e-commerce websites and service providers, they may have to own a large number of digital certificates. This is unacceptable for users. Based on this, no matter Whether it is for management departments, service providers or users, it is an inevitable trend to establish a unified e-commerce management organization, but there is no such organization system yet

Images