Security Analysis of E-commerce means of payment

Security Analysis of E-commerce means ofpayment[Abstract] electronic means of payment is the core part of e-commerce is the key to its success, this article focuses on several different e-commerce payment metho ds, and a variety of payment of the security is analyzed.[Keywords:] means of payment, secure e-commerceI. IntroductionThe trend of globalization of e-commerce, e-commerce transactions, the credit c risis hit quietly, false trading, counterfeiting, contract fraud, violations of the legitimat e rights and interests of consumers and other illegal activities often occur, these ph enomena to a large extent has hampered China's global e-commerce e-commerce as well as rapid and healthy development. The main factors limit the Development of e-commerce is the means of electronic payment security.2, the main means of electronic payment and Its Security Analysis1. E-Card(1) payment: credit card payment is the most commonly used electronic paymen t instrument is in the Internet environment through a standard SET protocol for Inte rnet payments, users on the Internet to send credit card numbers and passwords, encrypted and sent to the bank to make payment. Payment process to conduct a user, merchants and payment requirements of legality verification.(2) Security Policy: electronic credit card, enter the Internet through the user ac count / password digital signatures, this Information through the payment of SET or SSL protocol gateway platform associated directly with the bank to pay the securit y of information interaction, the network payment, the security of this payment can be guaranteed.(3) security risk: a simple, technically speaking, no security risk issues.2. E-Check(1) payment method: E-check is the use of digital means of online payment, pa yment process and payment procedure is similar to the traditional checks, but elect ronic check completely and set aside the paper medium in the form of its check tr ansmitted through the Internet and use digital signature instead of the traditional signature methods. The transaction process is as follows:(2) security strategy: and electronic credit card the same as using account / pa ssword the way digital signatures for authentication. The payment of the current ge neral through a dedicated network, equipment, software and a complete set of user identification, the standard packet, data verification completed standardized data tra nsfer protocols, so as to control security, from the above transaction process, we c an see, the electronic check payment system, there is a dedicated and reliable sec urity measures.(3) security risks: private network on the application of a sophisticated model (s uch as SWIFT (Society for Worldwide Interbank Financial Communication, Society f or Worldwide Interbank Financial Telecommunication) system); public networks on t he point of being still in the experimental transfer of funds.3. E-Cash(1) Payment: electronic cash is a kind of digital form of cash money, it is not t he same as with credit cards, credit card itself is not money, is only a transfer me ans, electronic cash is itself a kind of currency, is a kind of data exists in the form of cash money. It is the cash value converted into a series of encrypted serial nu mber, the number of these sequences to represent the real value of various amou nts. Can be directly used for shopping. E-cash has the following characteristics: an onymous; savings in transaction costs; payment flexibility; secure storage.(2) Security Policy: No suitable authentication mechanism is anonymous, in orde r to prevent forgery, electronic cash transfer is digitally signed.(3) security risk: tax evasion: As electronic cash can achieve cross-border tran sactions, tax and money laundering will be a potential problem. Unlike e-cash, like real cash in circulation will not leave any records, the tax department is difficult to trace, even if future adjustments of the international tax rules, due to its non-tracea bility, e-cash is likely to be criminals for tax evasion. Reposted elsewhere in the Fr ee Papers Download Center Money laundering: e-cash to money-laundering has become very easy. Becaus e the use of electronic cash the money can be sent anywhere in the world without leaving a trace, if the investigating authorities want to obtain the evidence, the ne ed to check online all of the data and decipher all of the passwords, it is almost i mpossible. Currently the only way is to establish certain key escrow mechanism for the Government under certain conditions, access to private key, which will harm t he privacy of customers, but as a prevention of money laundering and other illegal measures, many countries have begun this practice.disrupting financial order: the legal status of electronic cash has been difficult to ascertain. This is because, according to the currency of the substance and the b orderless nature of the network to infer the status of national central banks will be subject to challenge, because no one strong and reputable global company, can be issued to purchase their products or Services digital equivalent, in order to avoid t he cumbersome procedures of banks and tax revenue. And this would disrupt a co untry's financial order, no country would not allow.Repeat Consumption: As the electronic serial number can be copied, and there fore requires a large database to store users to complete transactions and E-Cash serial numbers to prevent the duplication of spending, which for software and hard ware requirements are high, so many banks do not support for e-cash business.4. Mobile Payment(1) payment: Mobile payment system for each mobile user to establish a cell p hone number associated with the payment of accounts, for mobile users with a mo bile phone payment and transaction authentication means. Users to make calls, sen d text messages or use the WAP function of access to mobile payment systems, mobile payment system will send the transaction request MASP, from MASP to det ermine the amount of the transaction, and through mobile payment system to notify users that the user to confirm After the payment methods can be achieved throug h a variety of ways, such as directly into the bank, the user's phone bill, or a dedi cated real-time prepaid debit accounts, which are by the mobile payment system to complete.(2) security measures: authentication method using personal ID / password. The part of the transaction is encrypted sensitive information.(3) security risk: ��deny Behavior: mobile payment encryption only encrypt par t of the transaction process, without considering trading of mutual authentication an d transaction non-repudiation, data encryption must be SET protocol model introduc ed into the mobile payment in. ��cell phone's own security: mobile payment, ther e are other problems: Most mobile phones do not have the user authentication mo dule, computing power is low, slow, inappropriate use of digital watermarking, due t o the encryption can not be very good, and the mobile phone messaging is wireles s, so there is at present on the larger mobile payment security risks.3, the conclusionAll of the above payment methods can not completely guarantee the security of payments, because the agreement itself is also insecurity. In order to further enha nce payment security, the intermediary must provide better services to support theuser, after booking of goods to the intermediaries to pay cash or check, the seller delivered the goods to an intermediary, intermediaries testing is not the seller of go ods meet the requirements, then the goods transferred to the buyer, the buyer conf irmation, payment to the seller, so that a better guarantee the buyer's interests. Alt hough there are still many problems of electronic payment (mainly security and trus t issues), but as the central link in e-commerce, and its development trend is irresi stible, the key is from the legislative and technical aspects to a gradual improveme nt.Reposted elsewhere in the Free Papers Download Center 。