Security Enhanced Direct Store Delivery System

《Security Enhanced Direct Store Delivery System》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、SecurityEnhancedDirectStoreDeliverySystemNitinDevikarandYuliangZhengDepartmentofComputerScienceUniversityofWollongongWollongong,NSW2522,AUSTRALIASeptember2,1999AbstractCurrentlythereislimitedsecurityprovidedincarryingoutbusinessusingElectronicDataInterchange(ED

2、I).TheaimofthispaperistoenhancethesecurityofDirectStoreDeliverySystemwhichisaspecialformofEDI.Thewholecommunicationprocessiscarriedoutusingatrustedthirdpartyserviceproviderwithaviewtomaximizetheperformanceofthesystem.ThemodeldescribesauthenticityusingX.500recom

3、menda-tions,condentialityandintegrityusingpublickeycryptographyandprovidesalowcostsolutiontotheexistingsystem.ThetransactionsarecarriedoutintheUN/EDIFACTformatusingtheX.435standards.1IntroductionTheprimarypurposeofEDIistoprovidecommunicationstandardsthatpromot

4、etheinterchangeofcommonbusinessinformationtofacilitatetheelectroniclinkageswithouthumanintervention.Inrecentyears,bothpublicandprivatesectorsuseEDIfortradingpurposes.TheincreasinguseofEDIinnancialtransactionshasmadeitnecessarytoconsidernetworksecurityingreater

5、detailandenhancethesecurityinthesesystems.ThefollowingissuesneedtoberaisedinviewofsecurityoftheexistingEDIsystems[13].ThereislimitedsecurityinmostofthepresentdayEDIsystems.Theyrelyonpasswordtoaccessthesystemthusmakingitvulnerabletopasswordguessingattacks.Asmo

6、reandmorebusinessinformationistransmittedbetweencomputersystems,weneedtoprotectthesetransactionsfromunauthorizedviewingand/oralteration.Unauthorizedviewingcanprovidecompetitiveinformationwhichwemaynotwanttodisclose.Withtheintroductionofthirdpartiesandincreasedr

7、iskofunauthorizedaccesstocondentialinformation,weneedtorestructuretheexistingsecurityfeatures.Generally,EDIsystemsworkonapointtopointbasisorhavelimitednumberoftradingpartners.ThesecurityandcontrolfeaturesincorporatedinthesystemisasstrongastheweakestlinkintheE

8、DIchain.Across-vulnerabilityresultingfromtechnicallimitationcancompromisetheintegrityofthedependentEDIsystems.Dierentsecuritystandardsmaycreateproblemswhentradingpartnersa