网上银行支付原理.ppt

《网上银行支付原理.ppt》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、ElectronicPaymentSystemsandSecurity电子支付系统和安全加密技术1网上支付原理LearningObjectives学习目的DescribetypicalelectronicpaymentsystemsforEC描述电子商务典型的电子支付系统Identifythesecurityrequirementsforsafeelectronicpayments识别安全电子支付的安全要求Describethetypicalsecurityschemesusedtomeetthesecurityrequirem

2、ents满足安全要求的安全方案IdentifytheplayersandproceduresoftheelectroniccreditcardsystemontheInternet识别互联网上电子信用卡系统的使用者和使用处理过程DiscusstherelationshipbetweenSSLandSETprotocols讨论SSL协议和SET协议之间的关系Discusstherelationshipbetweenelectronicfundtransferanddebitcard讨论电子资金转帐和借记卡之间的关系Describe

3、thecharacteristicsofastoredvaluecard描述一个储值卡的特征ClassifyanddescribethetypesofICcardsusedforpayments辨别和描述用于支付的IC卡的类型Discussthecharacteristicsofelectronicchecksystems讨论电子支票系统的特征LearningObjectives(cont.)学习目的(继续)SSLVs.SET:WhoWillWin?SSL对SET:谁将赢?ApartofSSL(SecureSocketLayer

4、)isavailableoncustomers’browsers加密套接字协议层itisbasicallyanencryptionmechanismforordertaking,queriesandotherapplicationsSSL是一个基本的加密技术itdoesnotprotectagainstallsecurityhazards预防安全威胁itismature,simple,andwidelyuse成熟简单广泛应用SET(SecureElectronicTransaction)isaverycomprehensives

5、ecurityprotocol加密电子交易协议itprovidesforprivacy,authenticity,integrity,and,orrepudiation它提供私密、真实、完整、拒绝方面的安全保护itisusedveryinfrequentlyduetoitscomplexityandtheneedforaspecialcardreaderbytheuser不常用、复杂itmaybeabandonedifitisnotsimplified/improved需改进Payments,ProtocolsandRelate

6、dIssues支付、协议、相关议题SETProtocolisforCreditCardPayments信用卡支付ElectronicCashandMicropayments电子货币和找零ElectronicFundTransferontheInternet互联网上电子资金转帐StoredValueCardsandElectronicCash储值卡和电子货币ElectronicCheckSystems电子支票系统Securityrequirements安全要求Payments,ProtocolsandRelatedIssues(c

7、ont.)支付、协议、相关议题（继续）Authentication:Awaytoverifythebuyer’sidentitybeforepaymentsaremade真实性鉴定–支付前的买主身份认定Integrity:Ensuringthatinformationwillnotbeaccidentallyormaliciouslyalteredordestroyed,usuallyduringtransmission完整性–信息不被偶然地或恶意地修改或破坏Encryption:Aprocessofmakingmessages

8、indecipherableexceptbythosewhohaveanauthorizeddecryptionkey加密术–除非那些具有一个授权解密钥匙的人可以解释信息内容，加密技术使信息无法被解释或阅读Non-repudiation:Merchantsnee