Electronic commerce system and management method thereof based on digital certificate

Abstract

The invention relates to an electronic commerce system and a management method thereof based on a digital certificate. A management server issues certificates and corresponding certificate private keys for each user end and each transaction server; the user end can access different transaction servers according to the certificate issued by the management server and can be accessed to different transaction servers to carry out electronic commerce action without unnecessary logging operation; in addition, after the management server validates the identities of the user end and the transaction server, and when a concrete electronic transaction is carried out, the transaction server validates the validity of the content of an electronic contract, and the management server judges the validity of the transaction so as to realize uniform authentication and management for electronic commerce behaviors and ensure the trusty degree of network electronic transaction behaviors.

Description

Technical field [0001] The invention relates to the technical field of digital information networks, in particular to an e-commerce system based on digital certificates and a management method thereof. Background technique [0002] With the increasing development of network technology, e-commerce has greater convenience and flexibility than traditional business methods, and people can conduct business activities without leaving home, thus becoming a new business activity widely used by people. Mode, more and more people conduct various business activities through the Internet, and new types of e-commerce applications such as online banking, electronic trade in goods and services, electronic securities transactions, commercial auctions, cooperative design and engineering, access to public products, etc. Constantly rising. [0003] However, due to the openness of transaction networks such as the Internet, the security problems faced by the network also follow. In e-commerce transac...

AI Technical Summary

Problems solved by technology

[0003] However, due to the openness of transaction networks such as the Internet, the security problems faced by the network also follow. In e-commerce transactions, there may be problems such as stealing secrets, destroying, intercepting, illegally accessing, destroying the integrity of information, Destroy the availability of the system and many other problems

At present, in order to solve the security problems of networks and systems, firewalls, intrusion detection, vulnerability scanning, and network isolation are usually used. However, although these information security technologies can play a greater role in preventing external attacks and illegal intrusions, etc. However, it cannot fully meet the security needs of e-commerce. The security problem of e-commerce is not only the confidentiality of information, but also includes other security problems: First: because illegal users can forge and counterfeit e-commerce Therefore, users who log in to the e-commerce system cannot know whether the website they log in is a credible e-commerce website, and e-commerce websites cannot verify whether the users who log in to their website are authenticated and legitimate Users and illegal users can take the opportunity to destroy and disturb the network order. Although the "username + password" authentication method can be used, its security is weak, and the user password is easy to be stolen and lost; second: due to the openness of the network Sensitive information and transaction data may be maliciously tampered with during transmission; third: Since e-commerce is not a physical transaction, the two parties to the transaction do not have transaction evidence such as a physical contract. Therefore, once the online transaction is traded Denied by one party, the other party has no relevant records as an arbitrable basis

[0004] Aiming at the above-mentioned se

Images