Đang chuẩn bị liên kết để tải về tài liệu:
Internet Security Cryptographic Principles, Algorithms and Protocols - Chapter 11

SET for E-commerce Transactions Các giao dịch điện tử an toàn (SET) là một giao thức được thiết kế để bảo vệ các giao dịch thẻ tín dụng qua Internet. Nó là một chuẩn công nghiệp hỗ trợ được thành lập bởi MasterCard và Visa (diễn xuất là cơ quan quản) trong tháng 2 năm 1996. Để thúc đẩy việc tiêu chuẩn SET trong suốt những lời khuyên thanh toán, cộng đồng và hỗ trợ cho sự phát triển của nó đã được cung cấp bởi IBM, GTE, Microsoft, Netscape, RSA, SAIC, Terisa và Verisign. SET dựa trên mật mã. | 11 SET for E-commerce Transactions The Secure Electronic Transaction SET is a protocol designed for protecting credit card transactions over the Internet. It is an industry-backed standard that was formed by MasterCard and Visa acting as the governing body in February 1996. To promote the SET standard throughout the payments community advice and assistance for its development have been provided by IBM GTE Microsoft Netscape RSA SAIC Terisa and Verisign. SET relies on cryptography and X.509 v3 digital certificates to ensure message confidentiality and security. SET is the only Internet transaction protocol to provide security through authentication. It combats the risk of transaction information being altered in transit by keeping information securely encrypted at all times and by using digital certificates to verify the identity of those accessing payment details. The specifications of and ways to facilitate secure payment card transactions on the Internet are fully explored in this chapter. 11.1 Business Requirements for SET This section describes the major business requirements for credit card transactions by means of secure payment processing over the Internet. They are listed below 1. Confidentiality of information provide confidentiality of payment and order information To meet these needs the SET protocol uses encryption. Confidentiality reduces the risk of fraud by either party to the transaction or by malicious third parties. Cardholder account and payment information should be secured as it travels across the network. It should also prevent the merchant from learning the cardholder s credit card number this is only provided to the issuing bank. Conventional encryption by DES is used to provide confidentiality. 2. Integrity of data ensure the integrity of all transmitted data SET combats the risk of transaction information being altered in transit by keeping information securely encrypted at all times. That is it guarantees that no changes in message .