Secure Electronic Transaction Protocol Research Articles

Research on Smart City Smart City E-commerce Security Technology Based on SET Protocol

Secure Electronic Transaction (SET) has always been regarded as an international security standard followed by smart city e-commerce. It generally uses public key cryptography and digital certificates and other related technologies, which can help solve a series of security problems in the development of smart city e-commerce. The above security issues are designed to include the confidentiality of shopping and payment information, the completeness of transactions, the exactness of identity and non-cheating. The completeness and integrity of information are guaranteed in the link of electronic transactions. However, this agreement has its shortcomings in that it is costly and operational review. Based on this background, the paper reviews the application of SET protocol in e-commerce, and hopes to provide relevant suggestions for its development and improvement.

The optimization effect of fuzzy factional-order ordinary differential equation in block chain financial cross-border E-commerce payment mode

To solve the problems of low execution efficiency and insufficient security of traditional electronic payment mode, in this study, an improved mode of cross-border e-commerce payment based on fuzzy fractional-order ordinary differential equation and secure electronic transaction protocol is proposed. Firstly, the competition model of cross-border e-commerce payment platform is constructed using fuzzy fractional order ordinary differential equation. Based on the theory of Hopf bifurcation, the stability of the model is analyzed. Then, the cross-border e-commerce improved payment mode is built based on the secure electronic transaction protocol. Finally, the efficiency and security performance of the improved payment mode are compared with that of the traditional payment mode with face through simulation experiments. The results show that the improved mode takes less time in encryption and decryption than the traditional mode; the time spent on the security payment of the improved mode remains around 1.2 s, while that of the traditional mode is around 2.7 s; the improved mode security payment takes significantly less time than the traditional mode, which indicates that the payment mode proposed in this research based on fuzzy fractional order ordinary differential equation is not only more secure than the traditional payment mode, but also can effectively improve the payment speed of users and greatly enhance their shopping experience.

A Secure Mobile Payments Protocol Based on ECC

Owing to the limitations of mobile terminals and network bandwidth, the current Secure Electronic Transaction (SET) protocol can not be introduced into mobile payment directly. Present mobile payment system often uses symmetric encryption algorithm that may bring in some security risks. A new secure mobile payment protocol based on ECC was presented ,which ensures information flows from merchant to customer and enhances the security of customer’s information. Theoretical analysis shows that, ECC can not only meet the requirements of short key generation time, but also ensure that at the same time of cracking code the ratio of RSA and ECC key length is greater than 5:1. The number of signing the certificate verification, asymmetric and symmetric encryption of the new protocol is also lesser than SET protocol, so the current mobile terminal and network capabilities can support this protocol to ensure safe and effective mobile payment process.

An Improvement to the Set Protocol Based on Signcryption

Electronic commerce, as exemplified by the popularity of the Internet, is becoming more important along with fast progress in communications and information technology. The SET (Secure Electronic Transaction ) protocol is a scheme designed to ensure that merchants and cardholders can conduct business over a public network. Although the SET protocol has some disadvantages, but still it is the most commonly used protocol in the Internet shopping. Signcryption is a cryptographic primitive which simultaneously provides both confidentiality and authenticity in a single logical step. Signcryption based on elliptic curves provides the same level of security using smaller keys compared to schemes based on the discrete logarithm problem over finite fields. This paper examines the benefits of using signcryption rather than signaturethen-encryption in the SET protocol. Using identity-based signcryption in the SET protocol reduces the number of encryption and decryption operations. Moreover, signcryption is less time consuming than signature-then-encryption.

A flaw in the electronic commerce protocol SET

The Secure Electronic Transaction (SET) protocol has been developed by the major credit card companies in association with some of the top software corporations to secure e-commerce transactions. This paper recalls the basics of the SET protocol and presents a new flaw: a dishonest client may purchase goods from an honest merchant (with the help of another merchant) for which he does not pay. Fortunately, by checking his balance sheet, the merchant may trace with the help of his bank the client and his accomplice. We also propose a modification to fix the flaw.

A SEEP (Security Enhanced Electronic Payment) Protocol Design Using 3BC, ECC (F), and HECC Algorithm

Unlike SET (Secure Electronic Transaction) protocol, this paper proposes a SEEP (Security Enhanced Electronic Payment) protocol, which uses ECC (Elliptic Curve Cryptosystem with F2m not Fp) (Koblitz, 1987; Harper, Menezes, & Vanstone, 1993; Miller, 1986), SHA (Secure Hash Algorithm), and 3BC (Block Byte Bit Cipher) instead of RSA and DES. To improve the strength of encryption and the speed of processing, the public key and the private key of ECC and HECC (Hyper Elliptic Curve Cryptosystem) are used in 3BC (Cho & Lee, 2002; Cho, Shin, Lee, & Lee, 2002) algorithm, which generates session keys for the data encryption. In particular, when ECC and HECC are combined with 3BC, the strength of security is improved significantly. As the process of the digital envelope used in the existing SET protocol is removed by the 3BC algorithm in this paper, the processing time is reduced substantially. In addition, the use of multiple signatures has some advantages, such as reducing the size of transmission data as an intermediate payment agent and avoiding the danger of eavesdropping of private keys.

Anonymous and secure electronic transaction protocol

We present a new protocol for electronic transactions which is not only secure but also anonymous, the latter characteristic being obtained by associating an encryption device with a chip card. Security is ensured by the use of encryption, electronic signature and authentication. In order to check the validity of the security properties enforced by the protocol, a model and a specification are provided. The protocol modeling language is a process algebra with value passing extended by an observation mechanism allowing the specification of security levels, by cryptographic primitives, and by a function call feature on private channels allowing the modeling of interactions with the crypto-system. The anonymity is expressed by an information flow property. The verification method, based on cosimulation, is proved consistent and complete and analysis confirms that this approach ensures not only anonymity (thanks to the fact that the client never discloses to the merchant any information permitting his identification), but also the quasi-impossibility of any fraudulent transaction.

Greater protection for credit card holders: a revised SET protocol

MasterCard International and VISA International recently proposed the Secure Electronic Transaction (SET) protocol. Constrained by being an extension of the existing card payment networks to the Internet, SET does not satisfy the concern about privacy infringement, in particular, caused by data aggregation. This paper revises SET, guided by the principle of information segregation and hiding. The revision allows cardholders to take part in account reporting, and offers them a credit card surrogate to conceal their credit card identification in the electronic marketplace. The result is a successful counter to privacy infringement in both the small scope of a transaction and the much broader scope of data aggregation.