【作者】 张芳云；

【导师】 肖德宝；

【作者基本信息】 华中师范大学 ， 计算机应用技术， 2002， 硕士

【摘要】 当许多传统的商务方式应用在Internet上时，便会带来许多源于安全方面的问题，如传统的证券交易中买卖证券和银证转帐方案及数据保护方法、电子数据交换系统、对日常交易信息安全的管理等。电子商务的大规模使用虽然只有几年时间，但不少公司都已经推出了相应的软、硬件产品。由于电子商务的形式多种多样，涉及的安全问题各不相同，但在Internet上的电子商务交易过程中，最核心和最关键的问题就是交易的安全性。 本文首先介绍有关一般电子商务概念及涉及到的安全隐患，电子商务是通过Internet及其技术进行的各种商务活动，因此，电子商务的安全和网络安全密切相关。本文分析了网络本身存在的安全隐患，常见的网络攻击方法，信息系统的安全体系结构，网络安全的层次模型，信息系统的安全评估准则，在此基础上分析了电子商务要解决的难题。 然后过渡到作为电子商务的一种形式—网上证券交易，网上交易是通过国际和国内互联网拨号上网的方式进行股票买卖和其他查询操作，近几年网上交易得到了很快的发展，如何提高网上交易的安全自然成了讨论的焦点，网上交易的流程决定了它需要采取多种加密的方法。 其次，本文分析了目前通用的加密解密技术，介绍了两种基本的加密算法(非对称加密算法和对称加密算法)，以两种算法中的典型DES和RSA分析其优缺点。 另外本文对数字签名的实现方法和算法进行了分析和研究，探讨了数字证书，非对称加密体系等及其在网上交易中的应用。 最后，结合前面分析的内容，本文对网上证券交易安全机制的实现的几个方面进行了分析，用开发工具delphi编写了客户端和服务器端的模拟程序，模拟了客户网上交易的流程，包括传输中的数据加密，客户端的数字签名，服务器端的数据解密和身份、数据完整性验证，演示过程中，将功能明显区分，实现各个流程的功能，结合加解密算法，分析了模拟系统的安全性。 fweed＼ 硕士学住论文 担吭示y ＊沾IR’Snrm 随着技术的进步，传统的加密方法受到了挑战，近年来又涌现了一些有更高强度的加密算法，这些方法如果能在电子商务中得到应用，必将大大增强在网上传输的数据的安全性，加强人们参与电子商务的信心。更多还原

【Abstract】 Security problems can be caused when many traditional trade modes are applied on internet, for example, traditional security exchange and cash transfer between banks and brokers, protection method of exchange data, EDI, management of daily exchange information, etc. Although the large-scale use of e-business has been for only several years, many companies have developed relevant products. Because of the variety of e-business, security problems concerned are different, But the core is the security of e-business exchange on internet.First, the thesis introduces the concept of e-business and concerned hidden trouble of security. E-business is various business affairs on internet and concerned technology, so the security of e-business is highly relevant with the security of network. The thesis analyzes concerned hidden trouble of network security, common used method of network attack, the system structure of information system, hierarchy of network security, security evaluation rule of information system, and analyzes the problem of e-business which shall be solved.And then the thesis discusses about security exchange on internet桝 mode of e-business. Security exchange on internet is to try to buy or sell securities and other query operation via internet. The rapid development of security exchange on internet in recent years requires the improvement of the security of exchange on internet and various encryption methods must be used because of the flow of security exchange on internet decideIn the next chapter, the thesis analyzes the common encryption technology, introducing two common encryption arithmetic (symmetry encryption arithmetic and non-symmetry encryption arithmetic), like DBS, CA Authentication, RSA, Digital Signature and the implement of them.In addition, the thesis analyzes the implement of digital signature and arithmetic, discusses CA, non-symmetry encryption system, and the application ofsecurity exchange on internet.At last, using delphi(A Rapid programming tool), the thesis implements client-side and server-side’s program. The program simulates the flow of security exchange on internet, including data encryption ,digital signature of client-side, data decrypt of server-side, integrality validation and analyzes the security of simulation system.Along with the advancement of technology, traditional encryption arithmetic is facing challenge. More intensity encryption arithmetic has come forth in the near future. If these methods are applied to e-businesses, the data security of security exchange on internet will be highly improved, and it will build up the confidence of people toward e-businesses.更多还原